f55ca59a1eafc7ff17ab526d1dbe703d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f55ca59a1eafc7ff17ab526d1dbe703d_JaffaCakes118
Size

10KB
MD5

f55ca59a1eafc7ff17ab526d1dbe703d
SHA1

399070b775257db621334e57641ef2b695fb5528
SHA256

b26703a13ec667b4850388afd8789cbd6f06514498cf63efecb371f0aa6d041d
SHA512

c7b316e5c18d6743c241daef03d6dd49b23b243268051d62abf5bc41f07f044b8f236d50cb6638016b1b382518b19657077217d3b83cc58cf44dd25b84d6f51d
SSDEEP

192:Wvqa17P/MrV+YBAW+TofN+5+8m+Q+Pm+9++m+WfN+gTs5b:kqa17srV+8XZVoChjE0fVhk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f55ca59a1eafc7ff17ab526d1dbe703d_JaffaCakes118

Files

f55ca59a1eafc7ff17ab526d1dbe703d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Intel\YaddekFizabab\habtouOnlineI\habtouOnlineI\obj\Release\PegasusPricesKbir.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ