a860776b27c8a85001f2a1a0d63df858_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a860776b27c8a85001f2a1a0d63df858_JaffaCakes118
Size

303KB
MD5

a860776b27c8a85001f2a1a0d63df858
SHA1

f87ee3c0a0c7eb6ee814328e707254fcea2c4833
SHA256

492a03e7f093d3b5f20f006188afe0d174fd071eb497ae15757a0892ee4ee1ab
SHA512

75fd5a985f9b424e10f93c2b9ba19d64fda3d4b231b6269d990f479de5145951b817b216aabce6be597c66e669bb83dfce36046d95a58911cb0f4ca4bf16b58f
SSDEEP

3072:J+uSoFwAAzUKj+yPwv49j+uSoFwAAzUKj+yPwv49RJBY8Fe+uSoFwAAzUKj+yPwk:JYog9jYog9R2Yog9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a860776b27c8a85001f2a1a0d63df858_JaffaCakes118

Files

a860776b27c8a85001f2a1a0d63df858_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\windows\Desktop\VB Tools by me\Projekts\Zy0x Renamer\Zy0x Renamer\obj\Debug\Zy0x Renamer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ