84d8d87c935edb092f8b691cafeb3e34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84d8d87c935edb092f8b691cafeb3e34_JaffaCakes118
Size

19KB
MD5

84d8d87c935edb092f8b691cafeb3e34
SHA1

f154144cabf3037d39872a7cc9e6534a45562df7
SHA256

5454ee3f85568fa976a452711317099987aa6d1fd103370e2adb657267ca8b5d
SHA512

3f0cf71b867b135bb771d896ffe0392e22f863876ffb986cb61a6833a57bf862e9d4214b22f72960d86cf90dbb159757039003eeafd2c422953370ea6a86ef67
SSDEEP

384:ZZ5e8e14GCDKUZ37+EvcRRmgHaeN+bKoI77mTxKvHl8ZFKwXyA:M8h9717oPmteN+byudK/l83IA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/txtread/TxtRead.exe

Files

84d8d87c935edb092f8b691cafeb3e34_JaffaCakes118
.rar
txtread/Custom.db
txtread/TxtRead.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\C Sharp\TxtRead\TxtRead\TxtRead\obj\Release\TxtRead.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
txtread/新云软件.url
.url