ea5620a780b14bf7b126bca6f2f87abd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5620a780b14bf7b126bca6f2f87abd_JaffaCakes118
Size

11KB
MD5

ea5620a780b14bf7b126bca6f2f87abd
SHA1

37d3e2b7e66a4713775ab912306815cbc36c59f3
SHA256

5467f194e758a27f538842f919a858333eff9d2fbb536e3c187f86ed742ae96f
SHA512

11198c1e02c7f59ba16184a16cfba2f8f30dee220b5ac617fd7aa324efe3c9f09c424343fdc2a3601f9ed77192198cb33ec8cb733505add72a88d15da2ff3096
SSDEEP

192:cawdSLXIyaBxlRv2N3QpV2/oiq1IW1P+QNKk68UVLOfhvSb:TwILXmze7/oiqv+QNKk68FfhvS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea5620a780b14bf7b126bca6f2f87abd_JaffaCakes118

Files

ea5620a780b14bf7b126bca6f2f87abd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\Developments\Remote Control Backdoor\uploader\Uploader\obj\Debug\Uploader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ