54067cc648103eac7c39721686197beb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54067cc648103eac7c39721686197beb_JaffaCakes118
Size

30KB
MD5

54067cc648103eac7c39721686197beb
SHA1

7234f13f34eca2cfa637fc20d2a7a942e1c30c43
SHA256

02e63754695bf976f69bf3748c13152a872cd7bd95b2759d76486d77f2790fac
SHA512

7e7e2137283519ad78865680d75fc97858f26d0261d96d2fb0404cc63dd5f596a881e841f6f220fec36accd902a58b08814fa0b136ab154f56f14ed257e89679
SSDEEP

768:AFnyj7p7GqPm2lvOWOiogOGVmoxIyWdpDd:5hGq+2VZFtFA0cx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54067cc648103eac7c39721686197beb_JaffaCakes118

Files

54067cc648103eac7c39721686197beb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Users\TheKing!\Desktop\NewProjects\NVA\AffiliateDL10\obj\Release\MyProjNVA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ