bb0e52bf2017b10bf43126f83362406f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb0e52bf2017b10bf43126f83362406f_JaffaCakes118
Size

2.3MB
MD5

bb0e52bf2017b10bf43126f83362406f
SHA1

757f8126277258934e34a4021644e2604d7a3cd0
SHA256

f4a510eca86075bd408e6fb8f1372ffeae341103677684346440066af91fab41
SHA512

bb1fc59c106d68d8f01acdfc28396066a61fea5abe860fdb02e5295693e07fd3f89063d134d09de43d423b3fc5aeed7be5e672bf1987084d7aa01b63a5ef4344
SSDEEP

49152:3UTsamnmvqKoyWdMIZJ0hm38juSoj/KOi9Ha4:3aKmvqKoyWdMIZF38qj7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb0e52bf2017b10bf43126f83362406f_JaffaCakes118

Files

bb0e52bf2017b10bf43126f83362406f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Eng.Ghifary\Desktop\Id project\Idm project\obj\x86\Debug\Idm project.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ