fada7726ed27842b5a832f89d01e9c2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fada7726ed27842b5a832f89d01e9c2d_JaffaCakes118
Size

209KB
MD5

fada7726ed27842b5a832f89d01e9c2d
SHA1

0fb0fca20e66fb092b5ede931713886d1dae0896
SHA256

6864e926be528cf38a9de41448dd8028deb8f24dc0c1c4e652d9896b9d183a18
SHA512

49585b9b392380656ca43d8a2480006985d974b0b8b508333e99c6dd3216acec747b2fd7881e5b49401254235b27648a82f1f020437f91ab9be332f5ecd9c73b
SSDEEP

6144:JGmVu/YZyzc92XgBaLEFePoJCDMt0Db28/s9ACk47Ap92:JGmVu/YZyzc92XgBaLEFePoJCDMtvgCn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fada7726ed27842b5a832f89d01e9c2d_JaffaCakes118

Files

fada7726ed27842b5a832f89d01e9c2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\isoz\Desktop\BOTS\tbot\TBOT1\obj\Release\TBOT1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ