841faaeaab29e36a109eaa08d6c78eca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

841faaeaab29e36a109eaa08d6c78eca_JaffaCakes118
Size

42KB
MD5

841faaeaab29e36a109eaa08d6c78eca
SHA1

be1b66093db763357daa91a50a01d7c975c84e89
SHA256

471b66e1d815e29bf341f563cc458109df868c6af52ba5431c34ebf95236806c
SHA512

8528a8d010efc89dc491a7ea7376f22803d59592b9d09754487186aa855324ad4adde063311afd4d06be439478d30de91765663c913890cc3db2569dca2f2ad3
SSDEEP

768:ztdOPa+i4mF5p7/O9lcHB5fouZS111tOBcP7cOweEstH74Wz+hofXd/jWKg0e:pQC+UX7Gc/fousuBYRZH74WzpfXdqKgx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
841faaeaab29e36a109eaa08d6c78eca_JaffaCakes118

Files

841faaeaab29e36a109eaa08d6c78eca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Sikario\Desktop\HACK XAT POWER\obj\Debug\HACK XAT POWER.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ