380a66eac17d9c9706fbfe293c1d0e1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

380a66eac17d9c9706fbfe293c1d0e1b_JaffaCakes118
Size

309KB
MD5

380a66eac17d9c9706fbfe293c1d0e1b
SHA1

a8d7076e9085dad12da838d5a15b3446eba3faa2
SHA256

e06da8d81d7769ee660871784b9607364eabae08eef670d8e08e3da96605d3ca
SHA512

d1017129fc71fa3b2b50ba90f9b21ee4f00980f7a9dbf8d21f6573db322072dce1bda7bb7b878d86b01e80b7110fe3347b82d4386b755576b77c1e1718b31fcf
SSDEEP

6144:djQVQDkxsMV4Uyf49Fx+V87XKK8BlrqtadP/LuxOPrDjHpuMNor8Uz910GqlD0:dKJV4RCx+V8MAtETucPH4jr8C91klD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380a66eac17d9c9706fbfe293c1d0e1b_JaffaCakes118

Files

380a66eac17d9c9706fbfe293c1d0e1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ayadi\Desktop\dependency\dependency\obj\Release\Cursor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ