dbe222eee261a755b9857716ea30e1e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbe222eee261a755b9857716ea30e1e1_JaffaCakes118
Size

264KB
MD5

dbe222eee261a755b9857716ea30e1e1
SHA1

5808a49dd50033349944a50aafb8ae54a059ded5
SHA256

fa1f18ce4e7a4b3f3b3290df5da2c57c44ac33a487e51cf735b08235fa6509dc
SHA512

0a37201e042d05cadbdfd588f9d82a552b3a58645472bfdce9cbe25fb289b51e333b2c134a666babd2a6cbe4e2867178c0105c3350269b76a5d9be5a71ab99e1
SSDEEP

6144:agf/R0PsY3WZH+Qq0fYTJWU6IHaMZAwZekYKbD9nRFV:1/5JJ+0iWU/Fe/KbD9RFV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbe222eee261a755b9857716ea30e1e1_JaffaCakes118

Files

dbe222eee261a755b9857716ea30e1e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Desktop\ByPassAntiVirus\Pressing\PackageProvider\obj\Release\LfсfдюARtе.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ