d1ad726b1fa89169507e8617c13e8933_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1ad726b1fa89169507e8617c13e8933_JaffaCakes118
Size

326KB
MD5

d1ad726b1fa89169507e8617c13e8933
SHA1

4d4c26eee284dd8301814ce71a4e7abc4b219be0
SHA256

2424d48a30a659a2c374ecca1fd07d959259029b689ca8c5899cc68117d2afaf
SHA512

0fd7c6481857e93bf4aaaf5c115c66f5156647f1c36db3440c5047ad5b09869ac89cf77fc0c40166daabd947229b6024217a63608f689d7ec95ea7869cc93dfa
SSDEEP

6144:8d1iEbE7SpQ/vPANEjXB+FKu8XqiTw/9RjfjfjfjJNd0GMJ:8vTbE76QINzm0uG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1ad726b1fa89169507e8617c13e8933_JaffaCakes118

Files

d1ad726b1fa89169507e8617c13e8933_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\uur\Desktop\DarkRAT v11 Full v5 Pro Edition\Non-Protected\Client\Client\obj\Release\Google.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ