ea473bd1e6f91a020a89b25695d8ba35_JaffaCakes118 | Triage

Sharing

General

Target

ea473bd1e6f91a020a89b25695d8ba35_JaffaCakes118
Size

55KB
MD5

ea473bd1e6f91a020a89b25695d8ba35
SHA1

92a56a271532038532d7091830e3f9f7a8a871be
SHA256

d264f3aa382f23e1b0bf3176f54a8f1b977b7daf482af3f8d384dc7d1b8db27e
SHA512

96f2cc0a73bd041d0f6a5f48d6e88407e7c8832835bb437378031d701672d4a0edce41f648b1aa4ed34f67190a66aaf3f53e5552de853b83d65e4d38028ff541
SSDEEP

1536:RKgzkS8p1G/NsOCMuvrEFWyC4hGW53K1G/NsOCMuvrEFWyC4hGW:RKgzkS8qC7yxwW53vC7yxwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea473bd1e6f91a020a89b25695d8ba35_JaffaCakes118

Files

ea473bd1e6f91a020a89b25695d8ba35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\salah mahdi\source\repos\WindowsFormsApp3\WindowsFormsApp3\obj\Debug\WindowsFormsApp3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ