dd6864fec9f7cb019d801cccfe135979_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd6864fec9f7cb019d801cccfe135979_JaffaCakes118
Size

11KB
MD5

dd6864fec9f7cb019d801cccfe135979
SHA1

653d04bc97755df1f6df1ebe7b1c87944d5abc68
SHA256

076f7f7c3c4323e8af9f90e912d0bb119d88b75054873410d34b1b8ee199c9df
SHA512

eb66fe46182c1b67a6342accf08c8b3fce6384cb2b30c87e0e39ec778e64b4df78cd6bc3486268bf55328ea7b8e5fda13e0dd56edea905c6395def2831ae4116
SSDEEP

192:QBhFZL7XhOiSH/sPQrEMqwwtSivtpVmk60nIWHUKN5XoN1LCR15Ps/Hp7i8B8f4u:QzFZPXhOiNZ60nFHUKN5XonwTPs/Hp7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd6864fec9f7cb019d801cccfe135979_JaffaCakes118

Files

dd6864fec9f7cb019d801cccfe135979_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\evroset\source\repos\Cheat\Cheat\obj\Debug\Cheat.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ