d5ea68642f2da7fd980d79dd6ce85374_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5ea68642f2da7fd980d79dd6ce85374_JaffaCakes118
Size

761KB
MD5

d5ea68642f2da7fd980d79dd6ce85374
SHA1

3df62bc5f3ec99370b932df6825c74ee5fd9b442
SHA256

4a6efcb887006be8d32630e8dc5216f9beb55e3184680af9777d9ac71a8dbc69
SHA512

e66350b72810047b508011baba51ac940c3dae923895655c8a926d4e06e3340e30af08b99ff6fc545e2df887162da1b19582d0b42cf7de7bff90fa89f8eff8da
SSDEEP

6144:zfqSloVS3aUYOnYAKq+vnRfw5AEkM0jDnYFbeb9:zfqSlzaUYOnYAmvnRfqinYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ea68642f2da7fd980d79dd6ce85374_JaffaCakes118

Files

d5ea68642f2da7fd980d79dd6ce85374_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\EXPL0IT\Desktop\neverlose .cc carsuk\GitHub SimpleLoader\obj\Debug\SimpleLoader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 716KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ