bf4094310f0e543af1b2619997e974bf_JaffaCakes118 | Triage

Sharing

General

Target

bf4094310f0e543af1b2619997e974bf_JaffaCakes118
Size

18KB
MD5

bf4094310f0e543af1b2619997e974bf
SHA1

c040e6bfcd198f2653ac7b61b585e24554f0a92f
SHA256

236feaf5663a753d0b3aed7000e9aad06f8c98b22712f398d5b82e423ccb14e2
SHA512

52d9676cbd2f54f5df6b402102f5a3c16c65f2ddc0a2cd80b638e19a9cf631d13bdffd04d0c3cc56e55feef4272ed7060fc407ecf3371b73aaeb7d93119eb42a
SSDEEP

192:U7db6MwmQ1+bjO0zOZw7/coF6dwNP15msiZVZnlYJLKuaGAhI4NI2RGGxg0bQdS0:UtQ9wrrFEwDonseutkLRGx0hiRwWWS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf4094310f0e543af1b2619997e974bf_JaffaCakes118

Files

bf4094310f0e543af1b2619997e974bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\apol0\VB .NET\Bots\Circle\Circle\Circle\obj\x86\Debug\Circle.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ