a0e8d9de1c92a74e237c6b4e7daafdf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0e8d9de1c92a74e237c6b4e7daafdf4_JaffaCakes118
Size

142KB
MD5

a0e8d9de1c92a74e237c6b4e7daafdf4
SHA1

55132b28648e7ec0131b852206c8a65ba46ba07c
SHA256

2396b0d1c2b330699e817e378c4dd2494b3787293ea0dba3c234cafebbc09fe6
SHA512

6085ba4d0adec60ffb6f9f5ac62345840f243c6bf65e385e1e124d6caf3aacbf2ff972eb9d8167b58601993da98bb206faeca78f583e4c4c430109772501e3c8
SSDEEP

3072:CqgnrcrV55rRAGdKcGiNp+RKxXMXguzJQaxQOIKJ:C7rcrdrKGdO9xJpvJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0e8d9de1c92a74e237c6b4e7daafdf4_JaffaCakes118

Files

a0e8d9de1c92a74e237c6b4e7daafdf4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Users\Administrator\Desktop\ResHacker_Menu_Patch(Src)\ResHacker Menu Patch\ResHacker Menu Patch\obj\Release\ResHacker Menu Patch.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ