de1890ce7b78e0621fc6e35149c27041_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de1890ce7b78e0621fc6e35149c27041_JaffaCakes118
Size

72KB
MD5

de1890ce7b78e0621fc6e35149c27041
SHA1

bd12958fd97168819f228c1d17ad6347e32f3715
SHA256

f41b6bdfa209576eb1f1cccfab1337174a0c7c67a9d8e6514bb6ff8701a03c00
SHA512

ff904ec24f103c8fc62477422dbc24608747fd1ea8a1e403f54cb55b427ac825739b292714cd75dd2f65462ac66ab90c53a44361aaa235fbe5fdef27b8d9881f
SSDEEP

1536:VyLXmai868XGeoXnxWB0j8rM0zBCHADBMd3H:V62aisGeohWB0zADB8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de1890ce7b78e0621fc6e35149c27041_JaffaCakes118

Files

de1890ce7b78e0621fc6e35149c27041_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\mcs\Desktop\Sours Code Xtreme\Sours Code Xtreme\obj\x86\Release\Sours Code Xtreme.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ