8af95d42d41487e0418a5bf67767c1ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8af95d42d41487e0418a5bf67767c1ee_JaffaCakes118
Size

61KB
MD5

8af95d42d41487e0418a5bf67767c1ee
SHA1

532710c293f633828445a8cf2817e4ff14a98335
SHA256

9458ce556305b49e99ccbbe8b2add1e673dd7808ddcf49e9ce797e236969146c
SHA512

a17b2df5936cd96ed1c4e5140e6e3695903dc54ed1ab1c3c6effa19b21d3a64fb326ac6b73e6b7f29f0aa74189ca55f89d1eaa881d3ca4fb6597b6f9cf0b273d
SSDEEP

1536:WBJS5l2qRpDXNTAIt2fj6q2WAL2cQwksjZRc:WBJSL2qRp5TAIt2SWAaL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8af95d42d41487e0418a5bf67767c1ee_JaffaCakes118

Files

8af95d42d41487e0418a5bf67767c1ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Rafael\projetos\Botnet.net\Botnet.net\Botnet.net\obj\x86\Debug\notronbot.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ