42ab58ade716afff2298a24e16f9351c_JaffaCakes118 | Triage

Sharing

General

Target

42ab58ade716afff2298a24e16f9351c_JaffaCakes118
Size

345KB
MD5

42ab58ade716afff2298a24e16f9351c
SHA1

1c60b3ea11a4576ab33e3070a42c200c31524c5d
SHA256

52a6da0771c571ae0c17a7496e4b1b252d657dfc41ab400d341e9d2d09f72487
SHA512

70d53f9fe6d2b212cab00cdd45ed6decc28f1f1e53419b40df7c638d2a17eee96cfb4184638f2773422f9a2bb76274b06c66d4f4d9468867c4bbd1a5a4085db7
SSDEEP

3072:ex+QMgSXupDSbLiAKWi63Q77NHhQjE3Ls8XLsEmSm/VGw8u0n1IM+CmNWqQ1CWw8:6TSeRSX0W9Q7JHsRam/Aw8uoxKfLk7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ab58ade716afff2298a24e16f9351c_JaffaCakes118

Files

42ab58ade716afff2298a24e16f9351c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dr.NasHmE\Desktop\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ