f06944b426592e27664232d517fde60c_JaffaCakes118 | Triage

Sharing

General

Target

f06944b426592e27664232d517fde60c_JaffaCakes118
Size

167KB
MD5

f06944b426592e27664232d517fde60c
SHA1

9b4dd65a309df92272e40b7ed648df5994ee38be
SHA256

bd47a406ef2c294819bf4679add473da74fa8259f9042ee0a4423075430a85b2
SHA512

b2f9f8c36b157a1a7bb6f50a003867da88bf7a42a9e73597ac609227f6d2a1ba5effc1131f12dfd4854794866e657e18ad3f23017af9b11ec60842d9f54cb6cb
SSDEEP

3072:GK60d2FOmsoZd/2Tm9iUgyn8dYfDFm40Gg6JZ/VShggK/ee/89csr:U0d2sm1gHdJS/VSb2s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f06944b426592e27664232d517fde60c_JaffaCakes118

Files

f06944b426592e27664232d517fde60c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Meleh\Documents\GitHub\ClassicOT\ClassicOT\obj\Release\ClassicOT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ