b694eb8f98d080e89b37e39194e1bd15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b694eb8f98d080e89b37e39194e1bd15_JaffaCakes118
Size

243KB
MD5

b694eb8f98d080e89b37e39194e1bd15
SHA1

6b24b4c8562329151c2a710afe2bb65f45f67665
SHA256

b5a85d1c62dd6b225909bd5de46603d06b24c28ed6db0394276443c013da885c
SHA512

f133f7fd8be0df0ce7f855172af602f13d60a59af75922a760d88c95ec562f9b254ed43155dfe026ba4815f8e1aa2b40de676963a0da203e0cc94bab2efbf706
SSDEEP

1536:oAvBzEs73AjzLUm/USRlA2YeB+JXPXxGNwqaBfAy/FVN9FpAEDV+LqMWnZe/p2uu:oAvFgN52gufx+w1BT/jRSqMCA/pk+m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b694eb8f98d080e89b37e39194e1bd15_JaffaCakes118

Files

b694eb8f98d080e89b37e39194e1bd15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\BTC\Desktop\Alle Projekte\BTCDoubler v2.3\BTCDoubler v2.3\BTCDoubler v2.3\obj\x86\Release\BTCDoubler v2.3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ