b7402aad1e2da9ff59d7fbf2fe6eb56c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7402aad1e2da9ff59d7fbf2fe6eb56c_JaffaCakes118
Size

400KB
MD5

b7402aad1e2da9ff59d7fbf2fe6eb56c
SHA1

1a28ec1a0e16068d43a06b75caf22828ed61e2ff
SHA256

0912c61f158fb7288c4e094f51122f4003a301d61c341a0df39b170ab266ede3
SHA512

64747c44a1135c9487bc2354bbf47946a01d1212452f18ecf35f3aaea16ae7e04bc91b4fc7647e20f322d44308a4eb288ea5b177e1e8154afeeadbf5a894361e
SSDEEP

12288:AVzzBScH0nqyCbsRtNmsBYP3/VrDFrFr6Mtsh:q4AP3/Vrb2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7402aad1e2da9ff59d7fbf2fe6eb56c_JaffaCakes118

Files

b7402aad1e2da9ff59d7fbf2fe6eb56c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Old Xp\Password Manager\Password Manager\obj\x86\Debug\Password Viewer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ