c0bdf55047b08624612f0b9cdff3ed70_JaffaCakes118 | Triage

Sharing

General

Target

c0bdf55047b08624612f0b9cdff3ed70_JaffaCakes118
Size

41KB
MD5

c0bdf55047b08624612f0b9cdff3ed70
SHA1

837417d75fde47263f897667c01a563639232fc6
SHA256

c6ea6f33e76c0d1b81a45e86f2d602afcd324c7e2954652ecb574d7e117c67dd
SHA512

cefcff3a015e88c259c564205db42b6e58d0d1ec62e793e581c0a51d7440cf1dd6f9348f10ae3fc873d6f7b73bf5d0fb8e98ecdec7437400b75418a3a479ced1
SSDEEP

768:jKP3Bv3RPC+5graoqoSUZKhSaMbLFaVaHghmV0krTaaY0PpsDmw9:uI5XRKhSaMbLFaVAJ0krTaepZw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0bdf55047b08624612f0b9cdff3ed70_JaffaCakes118

Files

c0bdf55047b08624612f0b9cdff3ed70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

G:\2020\MyASUS2.0\MyASUS2.0\src\UI\TrayIcon\obj\Release\SysTray.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ