52c142d67e3d085098cd8fb806af250f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52c142d67e3d085098cd8fb806af250f_JaffaCakes118
Size

101KB
MD5

52c142d67e3d085098cd8fb806af250f
SHA1

bd8e9ff78a2aabf186ff290ffa26bbb527de63ed
SHA256

a17d7b7ab4592a618f8304847743fc53e28f9f031abfac1c7a6255ea0cfbadf5
SHA512

0e157f0a6b69fbaf6a27e52af5f6beecf62c77679ab75c1bd16b3001907a62b4d2ac53a80ad4c60b92d0e32fd234d5dd37ae372a6f9f5453d92a11b6a6893ef3
SSDEEP

1536:Jud5ntTHiMFiKFEvUrEdCrrGrPhL5LhIV3acYKT9HFpwTQ:JUbB5FErkrrGTh9LhIdacYKT9lpwTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52c142d67e3d085098cd8fb806af250f_JaffaCakes118

Files

52c142d67e3d085098cd8fb806af250f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\New Backupz\Dr.Klog\DrKLoG V0.5\stub build 1090\klog\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ