69fa9da53818995e542125c236bd79a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69fa9da53818995e542125c236bd79a6_JaffaCakes118
Size

611KB
MD5

69fa9da53818995e542125c236bd79a6
SHA1

e08d64d257d4d0861f3288e20beb8be62045caee
SHA256

eefe46237066ff8612b5e9dd8d1dd992770ed776c3f4563c12137c8f6b17a032
SHA512

48a0b1f5459d7c05a2bf66f8aee339f346e47f3ff9e87b6d6cfdc1215b4fc1713847e4f8f1e377018050ffdec2f66b1df03f745d3d24c7808fcf41f589e86ca1
SSDEEP

12288:tOn20195z4JmnnnO43wv6yQkr0dVVVeIFXMGCcsUcUk:D0L5zmwOEwvrQkr0dVVV5Ef/Uk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69fa9da53818995e542125c236bd79a6_JaffaCakes118

Files

69fa9da53818995e542125c236bd79a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\knack\source\repos\RouterHak\RouterHak\obj\Debug\RouterHAK.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 608KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ