ccf59a9ca800d77f057cdc4f521495c1_JaffaCakes118 | Triage

Sharing

General

Target

ccf59a9ca800d77f057cdc4f521495c1_JaffaCakes118
Size

555KB
MD5

ccf59a9ca800d77f057cdc4f521495c1
SHA1

7cdab49311072b2de9adc80c44bb60c323367321
SHA256

0d5e2eae0c67083409f56b1b0da8a3ed755241f3c571c28fae7f6a8ba383ff72
SHA512

7ba18a18d3af162ea408746b362d6d56027b76c3f3208e87cea43aa9023ac39e1fa000c95d8e02c45e974674dc327f26f3d6a4ce0b36b1ccb226036ed104596a
SSDEEP

12288:LuRGujKm9u7E+EZj/ock+bNvVRbV3/pPtQDROsJt:LuRGKG7E+EZzoqbvR53VtQDROsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
ccf59a9ca800d77f057cdc4f521495c1_JaffaCakes118

Files

ccf59a9ca800d77f057cdc4f521495c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\madar\Desktop\Venom Software Cracked\svchost\svchost\obj\Debug\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 553KB - Virtual size: 552KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ