3772a3deeb781803a907ed36ee10681d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3772a3deeb781803a907ed36ee10681d_JaffaCakes118
Size

398KB
MD5

3772a3deeb781803a907ed36ee10681d
SHA1

168c26c8a9dd6328e317265fe691795583bf3bdd
SHA256

e292cbe7ddbc036009d7ef0deaab49d12005c9267e12a338bbba7782925ef1a6
SHA512

9de89592e98fe7ec7b5ce9bf4dd628568ab2fffac7c49e50fafcb64c94643b1727fa0e4589f4f6351cad779556da8c6b44d194fb1edd16006a971664ac7cbf33
SSDEEP

6144:56WSHBUWCr19zQgCz+rd9ZHYcmrmVcXHU:5rSmzrXz+SLZ0gcE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3772a3deeb781803a907ed36ee10681d_JaffaCakes118

Files

3772a3deeb781803a907ed36ee10681d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\George\Desktop\Projects\ZeroLocker\Testing Stuff\Testing Stuff\obj\Debug\Task Manager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ