a0d600e0389726a99726f844d2edb197_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0d600e0389726a99726f844d2edb197_JaffaCakes118
Size

176KB
MD5

a0d600e0389726a99726f844d2edb197
SHA1

09b9ebd6c2d7c49e530db18e57b82f29195d003d
SHA256

211be4e1904f5e0cce257a48a8746a5a8a5608f070e407588ae1ca8f727783e6
SHA512

e25d8f96cfd5b9fa2ac40f48f4559843f39c9685f85d2de32bc5a034341bc11284454bc145ec56a8da62c9789e9f8b8db6fc6ca2aac3dd0ad05313d9532261b9
SSDEEP

1536:kuaLSR6xumQ5KmGnO9NsaQ7Majout+kxevJZdK6B/VQ/s:kC6xV3mGnO927SEIU6tu/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0d600e0389726a99726f844d2edb197_JaffaCakes118

Files

a0d600e0389726a99726f844d2edb197_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Guest\Desktop\KBHook\KBHook\obj\Debug\Plowmaster.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ