852082a0adf72dc8207922f11cb47592_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

852082a0adf72dc8207922f11cb47592_JaffaCakes118
Size

125KB
MD5

852082a0adf72dc8207922f11cb47592
SHA1

d7ba7c6352f3f086d1d57f0c779bd9fa2f36f9f6
SHA256

5bd4e01b17e1d1632cf0c8eae5e99b2bbf3a9cc7fc5439d9cdbae386992ecf57
SHA512

9326ba04f251817f38d3785a54a801eced4433a8533587ec50b9e2f7b0e78d6ca3cc72c339f16afa397f6d78e78d91979d51263190b291db7d14d3d7eb08de3b
SSDEEP

3072:Q1kRKkl2stWlJyR6cWPmjuC0lGUGqAwIneI6j9L74NzmmwhmqR:Q1kRKkZaaiGUGsIoImm6Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
852082a0adf72dc8207922f11cb47592_JaffaCakes118

Files

852082a0adf72dc8207922f11cb47592_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Zac\Documents\No Strings Attached\ZeroTouchUI\obj\x86\Debug\ZeroTouchUI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ