ba1825504d709ed15ad7c8b842d7ef4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba1825504d709ed15ad7c8b842d7ef4b_JaffaCakes118
Size

93KB
MD5

ba1825504d709ed15ad7c8b842d7ef4b
SHA1

79aa5c4c1fc14857426b87af5e3f964325bb4943
SHA256

1156cac96e9c323f8fe88ea2bbd7cd5d0588f09b618b2f784b2ec023d6b80c13
SHA512

2a55777c89b784431f5819780eaf0aec6249d72f7551027bf2a43962edd387c016276256f7a97fa920b38fbe91fb4647e3ccbda9e917a36b0fabc9c86552150c
SSDEEP

1536:nbbJnhEQ0JuJ92pv1NV50D/Q+4Dgrx4nQCY0JxRY91NR0xz8h48Ad4yyWd:bbJhiJu+JV50OsrWbjBYfN+xz4ECyyWd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba1825504d709ed15ad7c8b842d7ef4b_JaffaCakes118

Files

ba1825504d709ed15ad7c8b842d7ef4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\obfuscar\CSPharm\CSPharm\bin\Debug\Realeza_10_0AVs.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ