1425f0a8f554ba935cee0ee5bf2c889e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1425f0a8f554ba935cee0ee5bf2c889e_JaffaCakes118
Size

130KB
MD5

1425f0a8f554ba935cee0ee5bf2c889e
SHA1

8d87deccd43c2f4ebf73aeb581fad49fdd14dcaa
SHA256

efd4e3072185fab572b6f5d1900644df71bb0be99efaf2d092c27f5f8b650605
SHA512

458839d46303deb1d75ea5f544cd2c213963f78b4c76d9dff1cda5d8bc77c3c9d8f3d4c186ca568152dc98dfda43ed1a98165a728ffd972ea9d22a19cf04a68f
SSDEEP

3072:sl6yx/EBgUYZRjnzX1OzOHSbacA3OkYERD:c6e8BUD1dy23V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1425f0a8f554ba935cee0ee5bf2c889e_JaffaCakes118

Files

1425f0a8f554ba935cee0ee5bf2c889e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Administrator\Desktop\ywlFIADujk\ywlFIADujk\obj\Release\icnire.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ