07e62a0de85810f0ca0f2062eb870ae5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07e62a0de85810f0ca0f2062eb870ae5_JaffaCakes118
Size

500KB
MD5

07e62a0de85810f0ca0f2062eb870ae5
SHA1

7b4d562f8718b02cc85014d7c85aeccb47a91b3e
SHA256

dd71dd8e8f30a5e31dc5335d61c2a67d4874e05a5e2dfe8dae5d60900a20e63a
SHA512

46de59b8f1d6676b72a520e356cd0f08a1c7ae6d8583ae7613df86ba94565b251643504ae0bd03eb0cfb90d9be542ce565a6de89c3cd48f0a5636af95c70306e
SSDEEP

12288:OjE/ZE0Xdf9lcyi3RbvCyal5wwpp47bFME8nRD:WC+0NcyAbGp5f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07e62a0de85810f0ca0f2062eb870ae5_JaffaCakes118

Files

07e62a0de85810f0ca0f2062eb870ae5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Administrator\Desktop\Project1\Project1\obj\Release\SearchFillterHost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 451KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ