d00f0145941c54affc627e5582989a90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d00f0145941c54affc627e5582989a90_JaffaCakes118
Size

11KB
MD5

d00f0145941c54affc627e5582989a90
SHA1

18bace3261cccae8881a1755262ff7f44324025e
SHA256

24d583eb3b0b6cc2f077717b04004568a8f2dceb853201ffeca945e2b56014a0
SHA512

fd9011db5251eaaa981fc9d13cffad378814bc3aea6bace3759878cc494ee4fbab0b47bd78689e8b2ed0ddff23d14e6e8699f4f51e442db48402c04b54185581
SSDEEP

192:0k2wkMS1nTXgb4R6B85Ls5gLSw+gifhCV:0akM5kLs5kSw+rf0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d00f0145941c54affc627e5582989a90_JaffaCakes118

Files

d00f0145941c54affc627e5582989a90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Karim Hmr\source\repos\System_manager.host\System_manager.host\obj\Debug\System_manager.host.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ