b414203082562ae967b0669df3519bba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b414203082562ae967b0669df3519bba_JaffaCakes118
Size

149KB
MD5

b414203082562ae967b0669df3519bba
SHA1

34fd5a1d5594e037993aedb81b0721e47e6e86bf
SHA256

aa3c1bee1b0d206db75d825e3f18d4f0da3482ac2ea817cdc89c6faab10a902e
SHA512

00e3c8cce33a4737fa911eb74b4398043d75c68d863504073965429ee2afc6381d57fa0417686ff64ab16eeb45573f6a0d13383bc80e9c0e95031deaa3484985
SSDEEP

1536:Rif6YuogqK4QjUho9JdZ582YSV4yLbeW+0v/ZwVcl:RiDuogqQEo9JdZ5rYg4yLbeGZqY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b414203082562ae967b0669df3519bba_JaffaCakes118

Files

b414203082562ae967b0669df3519bba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Oskar\Desktop\Rasomware2.0\Rasomware2.0\obj\Debug\ExciteRAN.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ