a5ee9fa92511ce1a15da0098192b897b_JaffaCakes118 | Triage

Sharing

General

Target

a5ee9fa92511ce1a15da0098192b897b_JaffaCakes118
Size

692KB
MD5

a5ee9fa92511ce1a15da0098192b897b
SHA1

34ab07733132180118b17e206abb1a9f2cc9599f
SHA256

d301837cbb4bedbfb9fe7be552e6c67fde23e52fc538df9c8d28f30957dac182
SHA512

ad6b7a1f2a0883d9b1d6522797eda95a4ce3e528cac312d6d0b25efda58de830907b21b24a880e247b258549760a0fbe6e9fcd95831b881c458e24acb1e2c27b
SSDEEP

6144:7Ot+1fomnRR86jCjeSonPW5h0Ot+1fomnRR86jCjeSonPW5hVET/Ot+1fomn5R8j:NnuDjQOunuDjQOm/uDjQO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5ee9fa92511ce1a15da0098192b897b_JaffaCakes118

Files

a5ee9fa92511ce1a15da0098192b897b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ekin\Desktop\face proje yeni\BegenMatik\BegenMatik\obj\x86\Debug\BegenMatik.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ