8ba34e2407866f59dca987ffd165862d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ba34e2407866f59dca987ffd165862d_JaffaCakes118
Size

151KB
MD5

8ba34e2407866f59dca987ffd165862d
SHA1

3d47095016ea0ccf4786f7cc392837ddb5aedf38
SHA256

d58c446c33a3c73ed79ac6045baee52d3058e94dbbe693968e8cac90b789afa1
SHA512

7ddca8971ad79ae5e6a5467846326f9d6fbb7417bc8b00fd3cc40386fc0021490395cbe114c6974841bfe45f43041de6a6bf91fe5a5e3dc69980ec2c44b7627c
SSDEEP

3072:FRY18Vu/YZyzc92XgBaLEFePoJCDMtTUdDig1gBaVId/QY9aUP4MRk+kN:FSOVu/YZyzc92XgBaLEFePoJCDMt0Db6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ba34e2407866f59dca987ffd165862d_JaffaCakes118

Files

8ba34e2407866f59dca987ffd165862d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\DarkWereWolf\Desktop\TBOT_Leak\Backup\TBOT1\obj\Release\TBOT1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ