3f5928e56b96e8e1f0ff0d9ed1aa5409_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f5928e56b96e8e1f0ff0d9ed1aa5409_JaffaCakes118
Size

26KB
MD5

3f5928e56b96e8e1f0ff0d9ed1aa5409
SHA1

598f6ed5c1ece804466713d43be3d46e9a429466
SHA256

bd25bef9d2a686f0f3167fa3df40c3184fbcefa87b5368dbef814dbcfdca87fa
SHA512

1b1ceba20f7f8be1e5378f2a2a9c9286e4f0ae94350d2ae74bc80dea5a6d5b2b595c0ac91018bad77d1f95ff64a9aaa54214f0975c7384505b63d8f8301078af
SSDEEP

384:rdFSpdPJNWAI5y55kdlL724jcyIl6d+dNXf0h4UAOABgPb2Wq1d8b:rdFSpdwyrkd5BcAhPK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f5928e56b96e8e1f0ff0d9ed1aa5409_JaffaCakes118

Files

3f5928e56b96e8e1f0ff0d9ed1aa5409_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Stefan\Desktop\Projects\Hostprozess für Windows-Dienste (2)\Hostprozess für Windows-Dienste (2)\obj\Debug\Hostprozess für Windows-Dienste (2).pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ