82b5d2c53a4c01848e493cd2dbe49a50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82b5d2c53a4c01848e493cd2dbe49a50_JaffaCakes118
Size

32KB
MD5

82b5d2c53a4c01848e493cd2dbe49a50
SHA1

0b97c8b2a8d2b8225e0d004918c3bc7bd421dc69
SHA256

2a3dc6c3f3dfeee036ce4aa1a0f9032760a4db6353055d0f426085dd02b987f7
SHA512

2d8117d8fc2af64ac63099788a16cde8ed3acc873558c8a6e73114e6e17a452480fd992bf4b7ef168a35e7e264690ff07be4fadec832b57e5c1e947d829b74f6
SSDEEP

768:d2fUUdm5LanjtmnIQAU4/g3pdbRFoP2vp:EAGEdbRFm2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82b5d2c53a4c01848e493cd2dbe49a50_JaffaCakes118

Files

82b5d2c53a4c01848e493cd2dbe49a50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Aplicativos\Desenvolvimento\C#\mtrl\mtrl\obj\x86\Release\mtrl.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ