cf145f6755f75b01e14dd8cbc4c36bbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf145f6755f75b01e14dd8cbc4c36bbf_JaffaCakes118
Size

290KB
MD5

cf145f6755f75b01e14dd8cbc4c36bbf
SHA1

ca899e8862e321636022b5560bed249c73c4b9ef
SHA256

1b53bb5b06dee1c32c41e7692314f850392b10ccca08a3813341d78066bfe210
SHA512

df74f97257e65e594e85533e7b8543e65cc8db1b7cfd516fdf62ec9d8f0bc2b607595d53b7d30ea8f6dec7fd4ee9a39cf1a04c1d138087a44768d4e5727d9e8f
SSDEEP

6144:Pufvzr8KxWzO+CWsehhivzqcd9xfxZSXtp/rGe29NOF7nDYWcPvRjSam7Zku:PujAEWzO+bswivzRonrGtiFoWgRjSamC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf145f6755f75b01e14dd8cbc4c36bbf_JaffaCakes118

Files

cf145f6755f75b01e14dd8cbc4c36bbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Surse\Crypterul Meu\Resource\Resource\obj\Release\Resource.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ