e9ff5744693b72bd7d8df605faabef3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9ff5744693b72bd7d8df605faabef3a_JaffaCakes118
Size

9KB
MD5

e9ff5744693b72bd7d8df605faabef3a
SHA1

be9f25d4690be8e11785f09e1e84870a94838c54
SHA256

7e9018d8bc8ef56e8c834dd24296b3fda20f1c95096fde330d6366df524e13a0
SHA512

af962fca3f1f44b430f6bf76aedc8b6ab456b38e474c7a36d0bda1af4afaf4660aaae33ccea9f169f883e06615035d6a56a25db11d8fc863371fb9b04f7443bb
SSDEEP

192:dlO5xJ1Agj/rLw1Lh2/ytNm5qLULxLwwsJlY68fqoQdz:dkDrLQLs/ytNCqLULxLaJlYhfqoQd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9ff5744693b72bd7d8df605faabef3a_JaffaCakes118

Files

e9ff5744693b72bd7d8df605faabef3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Сергей\source\repos\WindowsFormsApp4\WindowsFormsApp4\obj\x86\Debug\WindowsFormsApp4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ