f0a1a0f0ea989771519068cc34ed26dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0a1a0f0ea989771519068cc34ed26dd_JaffaCakes118
Size

25KB
MD5

f0a1a0f0ea989771519068cc34ed26dd
SHA1

3294bdd90cddf3cec74d77914e9e48c2786f7c34
SHA256

c1e2f51e35a9d475cffea7ee65e47e36781f1e3aeae724bf48d5c3a982a872c5
SHA512

9d73624421d00c6797c90e11f01b744e3f85bc5171744bf9234b5aee282167eef83b0e4076b0031a7f2b9a2957599d1c96f29a903e8861ff11b700d0fea66fce
SSDEEP

768:DqnnKK36qib1J037G9baaq985mIC0P0mLcBQ0/2ss:Dg8vCwiQz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a1a0f0ea989771519068cc34ed26dd_JaffaCakes118

Files

f0a1a0f0ea989771519068cc34ed26dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\COMPAQ\Desktop\zBOT\zBOT\zBOT\obj\x86\Debug\zBOT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ