c8991d9d133a6910355d4fdfde66c3b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8991d9d133a6910355d4fdfde66c3b6_JaffaCakes118
Size

25KB
MD5

c8991d9d133a6910355d4fdfde66c3b6
SHA1

0729e1f55853ea44cd02199251a9e86cffdd81b7
SHA256

89b4afdf26843c09b5deaa9bf822789e6d237d7ecab2d2d417f880061c510f08
SHA512

55ae447d0e0adde4c077da538b24924cc1a87b71bc236f572994de0e4ffa5d43fffc7d6440b2734cc14c4f3f13807d4a89ba5185c3cd8f2e4c25b7a279f97224
SSDEEP

384:oUl1YkZSHjvVO4zUrWZ39PWLyJL7I4jcPlQCwsL4P+dNOdsx5TrpywokNQnAXMi:oUnSHj3Z34+ncPSrCjnXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8991d9d133a6910355d4fdfde66c3b6_JaffaCakes118

Files

c8991d9d133a6910355d4fdfde66c3b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Visual Basic\My Projects\Madness Messenger Solution\Madness Messenger Project\obj\Debug\Madness Messenger Project.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 173B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ