08b4999445ebfb5281ff90ab4ffbeebd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08b4999445ebfb5281ff90ab4ffbeebd_JaffaCakes118
Size

41KB
MD5

08b4999445ebfb5281ff90ab4ffbeebd
SHA1

2277b4f0f5c197c401d4e7ac464879980f06a065
SHA256

ad08e2f97c1d8c5ab30f1c5cdba675cc52ff9e33d60c65cd0b587e567a9b8bf8
SHA512

ce347f387b6b27e0e296e12166c23de0af738877ef603ff4763698a44d5f7715b4cf8551c601b1a05cc1121bde02c21afcbad45b3a066ab3ac84d6df94d156cc
SSDEEP

768:io6tsE0/ApRVEEEEEEEEEEEELSq8wbAFuNbMYRsbYJ4lUetSI9UBsOFEEEEEEGEv:i9AApRVEEEEEEEEEEEELSLlF5+5J4SKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b4999445ebfb5281ff90ab4ffbeebd_JaffaCakes118

Files

08b4999445ebfb5281ff90ab4ffbeebd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Zach\Desktop\Test4\BabylonSettings\BabylonSettings\obj\x86\Debug\nvTray.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ