b121f1d1fad96137af6b298068e1f6fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b121f1d1fad96137af6b298068e1f6fb_JaffaCakes118
Size

647KB
MD5

b121f1d1fad96137af6b298068e1f6fb
SHA1

8a5f6026c7af5ab571bcbf46010ac18394e4d5a5
SHA256

b9846a368b9ad6876869dc59bd5f2096d03002462b693f9837719ed796243c76
SHA512

5b9073b7a262c75b89b54b2afda351ea5db7c502a42ecf56e8d6bb0b33073f9b2e1e2ae6936747b51d53632d2b2d1868d50096b5177c01f5fe95a8ea6a83a382
SSDEEP

12288:o+odvTjQ6VCpLH1upFON/Z5mKJPwpAb3OYMpbhOySbalSlSZHZ8:o+odjhoHIg/Z5XJxCddhuwhx6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ApplicationForm.exe

Files

b121f1d1fad96137af6b298068e1f6fb_JaffaCakes118
.zip
ApplicationForm.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\user\Desktop\Olasexcy\Project 2008\obj\Release\ApplicationForm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ