fb91dd0613b98f87b43cb220020fee5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb91dd0613b98f87b43cb220020fee5c_JaffaCakes118
Size

213KB
MD5

fb91dd0613b98f87b43cb220020fee5c
SHA1

c528a0d4eac2ddfb00e4d3db701e3847a37c1710
SHA256

042ec3c81b235efce8181f4ff47112bde1ae594842ef574e0fa80e1dfcab2360
SHA512

39b6522b37f76da834eba6040121155eec394aa3ed67bdaa7ad7bccd6ed166050d7a51405a7262b25d64d35869d781d1113e7031536e239bf188bfef79c667e1
SSDEEP

3072:0Zg+19U1KUyEZWzNBbnYdRHikQ75/plwQtRCg/46vWAo:0Zh9RDHbYdkFBpLCgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb91dd0613b98f87b43cb220020fee5c_JaffaCakes118

Files

fb91dd0613b98f87b43cb220020fee5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Privae\Desktop\Fg Power DDOSER Works\csrss\csrss\obj\x86\Release\csrss.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ