0f2c1f980829e684a204112ea45ea115_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f2c1f980829e684a204112ea45ea115_JaffaCakes118
Size

20KB
MD5

0f2c1f980829e684a204112ea45ea115
SHA1

c95ebe0614f96eb82f0f5d503e65e49741c6a30d
SHA256

9cb4049481d586eccb979bcaa2ace7cbf0f28c26306633737f26604ff09374a9
SHA512

4c878854b78e86ed03a1761896123d59de37de24f485cf2580f7b801f13e78c232e9e6b10a871d040cfb34ed3088d634e1ca32f8adc6d1b7e326ab400201c99a
SSDEEP

384:Rdv4xKDhSCbuhvM2kWZyJL724jcypiN51+dNRB53FVtci6WnF:Rdv4xKohvABcWiNmb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f2c1f980829e684a204112ea45ea115_JaffaCakes118

Files

0f2c1f980829e684a204112ea45ea115_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Amro\Desktop\Amro Pro\WindowsApplication1\WindowsApplication1\obj\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ