06ea3e4fc9dd2721f8de805e486e82d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06ea3e4fc9dd2721f8de805e486e82d6_JaffaCakes118
Size

76KB
MD5

06ea3e4fc9dd2721f8de805e486e82d6
SHA1

285fdcc7d311ae807be4418e62500a3c319b230f
SHA256

7d9e21a175bf6bf4ead5b8452ed8a80fe9c9890ed549ef7f8ce68fa0a41aee62
SHA512

ae44b1ba20aeef7a1b6ef281135fb975053fef923f7cf4ec86b66fa53d21b60f1bf35c54a3cfc9bef8efd2b89294050430c42153dc7e166ce92deb7348b0bd58
SSDEEP

1536:Vu8OvexxZ6lk47BLabUUGudow0LdaYguDx:VuM8lh7ENow0LdeWx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ea3e4fc9dd2721f8de805e486e82d6_JaffaCakes118

Files

06ea3e4fc9dd2721f8de805e486e82d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ayadi\Desktop\dependency - Copie\dependency\obj\Release\Cursor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ