c949490ac202668b3bcba4607dd9b13c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c949490ac202668b3bcba4607dd9b13c_JaffaCakes118
Size

737KB
MD5

c949490ac202668b3bcba4607dd9b13c
SHA1

42957db441ceb95266d1cbc7c6dccc1226163338
SHA256

e22ca9180212d9565609f126ed209bae9b88c985f04fec7696d18e4e4bf08ed3
SHA512

017c7fbdc8b9df8effe679907f46ecebb120704ff917aaadbcdd400522f9dee90aa4d056ccda909cf630e9c85945e06f4cfaf5f858113cdb1245cd22a6623541
SSDEEP

12288:DvTbE76QINzmf1wjJmd+6iknu5Uki/OZRGoOK+gJf86QCcKNYV2:EKJtknuy/KM4Ns2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c949490ac202668b3bcba4607dd9b13c_JaffaCakes118

Files

c949490ac202668b3bcba4607dd9b13c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\uur\Desktop\DarkRAT v11 Full v5 Pro Edition\Non-Protected\Client\Client\obj\Release\Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 732KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ