94614feed119ed01318197c8ec2797e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94614feed119ed01318197c8ec2797e5_JaffaCakes118
Size

60KB
MD5

94614feed119ed01318197c8ec2797e5
SHA1

d67ed7ee8efad557e1f47c8df0782b3ad595f6d2
SHA256

e7b77f437316aedb0f42d11336dcd1ae0f177c70ebecb466b1596af36414316d
SHA512

f0c8f3e720c251f6dc9096a30e3ff85c311bbade1b0c29de3cd22b08529f50da76f4853d4c1d1042c3f6c594888b6e5f7400bef831a38a9479dea27d9854f484
SSDEEP

1536:A2Aqi9yorU/0Bbv5qq0+5M6zfMdLSmJaH0YpNG:OqwRb8jcDzuSmkbpNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94614feed119ed01318197c8ec2797e5_JaffaCakes118

Files

94614feed119ed01318197c8ec2797e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Player One\source\repos\Projekt Informatyka\Projekt Informatyka\obj\Debug\Projekt Informatyka.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ