bd952019e2fb08a69cc2465f1cec1690_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd952019e2fb08a69cc2465f1cec1690_JaffaCakes118
Size

10KB
MD5

bd952019e2fb08a69cc2465f1cec1690
SHA1

f996df4d2387ad376979fc22208582fad1c8579f
SHA256

83389658be0565fc0355a5c6f016483c62ef7a28683aee41b518a2a766924f18
SHA512

eb485ccf480794202baad31a5648b2f0213a32d1f5e3ec3835c2c9b0867f8a5fcee4dfeb609987994e256a061f3da92aa34920d7cd37c3bbdfc95ca55eaf807e
SSDEEP

192:YXTQnHtVo8UvHJRWLZLrKpH/90KcVSUgbRbxD:EEy8QHJRWLZLepf+sUg9bx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd952019e2fb08a69cc2465f1cec1690_JaffaCakes118

Files

bd952019e2fb08a69cc2465f1cec1690_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Eng Moha\Documents\Visual Studio 2015\Projects\WindowsFormsApplication117\WindowsFormsApplication117\obj\Debug\Criminal Minds.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ