e1311d4e68289ede0cdb92a2551bbb2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1311d4e68289ede0cdb92a2551bbb2c_JaffaCakes118
Size

72KB
MD5

e1311d4e68289ede0cdb92a2551bbb2c
SHA1

45e7d5912ced7852d7951040911dea329b5136f4
SHA256

944357e13772b0f3a56de3e8da0534f1d3ee36032a83b1dd12f2de97fbcf20be
SHA512

d28d8c9f3afd1d99f44e4f5db5a79c2a20d2ad3d03452dab6b1c28cacb4090de03ae8e0a265af8e6a48188e53cf960f200c7bf1e18f2665d621ad3d3564d86e9
SSDEEP

1536:aaD/A9b5RvlScaPCkVsTOL4RL+PpaOFbo:aoA9bLvlS3acsTZRqPp/bo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1311d4e68289ede0cdb92a2551bbb2c_JaffaCakes118

Files

e1311d4e68289ede0cdb92a2551bbb2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\PouetPouet\Documents\MesApplis\C#\Hackedis\Hackedis\obj\Release\Hackedis.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ