ebaf0b51ccc100e3b9014cd10ad02a62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebaf0b51ccc100e3b9014cd10ad02a62_JaffaCakes118
Size

424KB
MD5

ebaf0b51ccc100e3b9014cd10ad02a62
SHA1

25d8540a4961c2c6aa44f43c1090812d47fc59e3
SHA256

0b96ce43eefb2990a4c794a185666b42f08fa1b2cfd7ebee0ddf90fe10a0a5cf
SHA512

396f769bb1da8861ba0d553fc37e2382c058f8e44aa65d24815eb326847dc0a4cd6442f1331d9b793f594e74dd11935bd0565fb4168bade80af4ab34016438d5
SSDEEP

6144:v0sLSifwIx8tVTFUs82tppPKUK/HDYG4tM:bLFSLfm/H8/tM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebaf0b51ccc100e3b9014cd10ad02a62_JaffaCakes118

Files

ebaf0b51ccc100e3b9014cd10ad02a62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Sup\Desktop\Wall2\Wall2\obj\Release\Wall.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ