368a849bcf5e9de81d67ad4e52385186_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

368a849bcf5e9de81d67ad4e52385186_JaffaCakes118
Size

1024KB
MD5

368a849bcf5e9de81d67ad4e52385186
SHA1

0b944d7e2831ac084981bb007935db7cdcefb425
SHA256

4f3fcf6c8ed66082ee265cdf9b53ea3052a3d71a02a750ee64b5e787b0a9392a
SHA512

5b099a18a32dc934a261c7d84d918b90e527c02f56fa72887991fec8db546b9e6b6fa2370f2d67209814144535877df60e4ccecc34a791c5268eee8019d354ed
SSDEEP

1536:8+cpVXC8ivaf0yN2Li6IY3Lpylo9NujMSx+HzSUmIkI1:RAB40ai6bKgSx+TSBIT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
368a849bcf5e9de81d67ad4e52385186_JaffaCakes118

Files

368a849bcf5e9de81d67ad4e52385186_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ayo\Desktop\zionst.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ