3ab2f747867f27353fb4387a2b3937b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ab2f747867f27353fb4387a2b3937b8_JaffaCakes118
Size

96KB
MD5

3ab2f747867f27353fb4387a2b3937b8
SHA1

289559ea3e1c19e97c90dcd203a8a503851f844e
SHA256

e2c2e471cc878fc5d6bd43be22fbf599b93b7c22248cf3b95653661f26e06285
SHA512

2716c24a0ea841e337dfc9121f58545e9a124305d2343396b808d0c178cfdac8378f7960c4ce4767541b0e9039afde3ba49ccd700258fe888feeac0358456e4d
SSDEEP

1536:QFC7yPJvgcTHN4TMAaQwl6j7k6l6j7k0OYtlCHnuWsvgPP8U4YGAFPl6j7kQQz9E:iNxv66psRs4PieMrWxgOU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab2f747867f27353fb4387a2b3937b8_JaffaCakes118

Files

3ab2f747867f27353fb4387a2b3937b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\YuvalVered\Desktop\HaRepackerSource\HaRepackerSource\Decrypt\obj\Release\HaRepacker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ