cf4224467d31b517acaf9a900a2f3ef3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf4224467d31b517acaf9a900a2f3ef3_JaffaCakes118
Size

283KB
MD5

cf4224467d31b517acaf9a900a2f3ef3
SHA1

c587e4391cace9109e7721911bc4521f714beac7
SHA256

d81c01836a53c1adcfff528dc83af537c3b467d2abf5cad8b01ddcad87cf4432
SHA512

5ca825fc865ba79b6c33fbff1269ad4c120c37b2349e148a5d8e735b328637b3c4e9efd1edf46ae003f61048a8fc379a7f81c3f7a6e9a9f164473191075cdf14
SSDEEP

6144:vWCtaJppYW9RX9N79eSY1/sr584eeDXrGMUDMnYArVRk3NNUlnqHizCgE7I:vWCEAW9179eNU24e8GMUWwdNU9qHaCg7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf4224467d31b517acaf9a900a2f3ef3_JaffaCakes118

Files

cf4224467d31b517acaf9a900a2f3ef3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Programmieren\Projects\TheReal_FHY-Bot\TheReal_FHY-Bot\obj\Debug\Windows-Explorer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 241KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ