f5417c49750dd4cb1f731eeb00a3630b_JaffaCakes118 | Triage

Sharing

General

Target

f5417c49750dd4cb1f731eeb00a3630b_JaffaCakes118
Size

262KB
MD5

f5417c49750dd4cb1f731eeb00a3630b
SHA1

147658eea488ea0b48a9f096914f1f339084a91b
SHA256

10a3b609f374a3e6cefbe0b809301dab08f90cb748ca2f31f9d1d18f89f2cb0e
SHA512

8203fa91f6b22f727ae2f817c668e1e5fa618cb98a6dd10e508a43c9859242edd9d36d5fdae79111cce0ff101125b7c0456e3ccbc2f67114263a1a2e96da7f0d
SSDEEP

3072:xZ6xgOHe9hLyBxIx3tsC0hQUHzjOdBzKlMZD0xhg42:GxwlyBmXsCvUHnOdBq0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5417c49750dd4cb1f731eeb00a3630b_JaffaCakes118

Files

f5417c49750dd4cb1f731eeb00a3630b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\mim5\Documents\Visual Studio 2008\Projects\BeyazMobile\BeyazBackOffice\obj\Debug\BeyazBackOffice.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ