94d154db9eb870594551c0787e50941e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94d154db9eb870594551c0787e50941e_JaffaCakes118
Size

15KB
MD5

94d154db9eb870594551c0787e50941e
SHA1

e52a3202d8795cac79d235d03ef56f68ab2ba3e0
SHA256

60091633a68323d9135ec30cf04bf1fee2caa78422e34cfa21a6b62c1e6d9b4e
SHA512

44b2c3d2cb1b0d4a7bf104e6dd06e9db86b26c07cf787ce5d4d5a267e8236d18bc3318dfd9004fdcabab20184d13f1d4c7d9df5e364161ea9a7c64b29ab58517
SSDEEP

192:Fw3WYi1gMYfmDYR1tUpm2ZmsLKnloY+45rcJtIhfGNev8fVRtOe:Fw3WYimRX5+XLV45cQfGNm8fVd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d154db9eb870594551c0787e50941e_JaffaCakes118

Files

94d154db9eb870594551c0787e50941e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FEDERIKO\Desktop\Osmanlı Stub\Osmanlı Stub\obj\Release\Osmanlı Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ