dc85e68cd0a11d55db1026418807d200_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc85e68cd0a11d55db1026418807d200_JaffaCakes118
Size

75KB
MD5

dc85e68cd0a11d55db1026418807d200
SHA1

6cea6580a0ab8964cda502a720eea5c4e153b701
SHA256

320f51f8ab1bf504bebe678e7f259c34a7e3f31e0369b16a9463c5575fec9b02
SHA512

e10994c3712ddcf7839e0e0611bd3e4a223b5fb793139da51e6ee0e14772b8ea4abe4626d4555f51b6430ebb07265c92eff550aeca73464403b6677f43af260d
SSDEEP

384:YWVyYN3meFciskvwKwq6u1APt3wNw4Rwdtaw8wioypHpiphpeADpApEzIk5DHM:P39cinAPt3wNw4Rwdtaw8wioKEo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc85e68cd0a11d55db1026418807d200_JaffaCakes118

Files

dc85e68cd0a11d55db1026418807d200_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\leona\Desktop\AxonSimpleUI\Plugins\obj\Debug\Plugins.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ