d61978ebbe787eb54e90757d90b66c03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d61978ebbe787eb54e90757d90b66c03_JaffaCakes118
Size

85KB
MD5

d61978ebbe787eb54e90757d90b66c03
SHA1

42b1653c9d5d58e228c76b88f17a8a4426f48407
SHA256

ff18ffa8a211529bb2831247cccb039ea4aa133abf0fe042afa41935b1966c1f
SHA512

7c410a6c7cbd159dacf686324e8290ccc6990619d40b12bac8ac5cdfb3cc047ee21ecbc05f799095bea90150e6c1c8c71a5b43dfbd126c596de872fc83307190
SSDEEP

1536:8+cpVXC8ivaf0yN2Li6IY3Lpylo9NujMSx+HzSUmIkI1Z:RAB40ai6bKgSx+TSBIT1Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d61978ebbe787eb54e90757d90b66c03_JaffaCakes118

Files

d61978ebbe787eb54e90757d90b66c03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ayo\Desktop\zionst.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ