a5bd1435b163098bcf56c9f6ec04ff63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5bd1435b163098bcf56c9f6ec04ff63_JaffaCakes118
Size

32KB
MD5

a5bd1435b163098bcf56c9f6ec04ff63
SHA1

5ef7f46bb775a11a90e47e8c39fe0d8038221915
SHA256

e048166e8f60e8a46be5cd4734cacb50be029106a773b9595980e817b7f62648
SHA512

f87a8768a881abaaa5082f777c9db86f8ffe6d4eb50b3dd873ae85ed7190da79ce26db9310c75da05c03c00b308980429777b5895fc6a4c588ab47b15281d126
SSDEEP

192:42Y01WvP96k91KlafpDLIgdQrG3rpdANG79oozVIUloKLW:MvP96u1AafpPDdwSr3ANGhoozqUWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5bd1435b163098bcf56c9f6ec04ff63_JaffaCakes118

Files

a5bd1435b163098bcf56c9f6ec04ff63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ \Hacker\Virus\Pharming\Bravo\Bravo\obj\Debug\Bravo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ