8cba37dd56f4eaa2c9fae8647d7510d5_JaffaCakes118 | Triage

Sharing

General

Target

8cba37dd56f4eaa2c9fae8647d7510d5_JaffaCakes118
Size

232KB
MD5

8cba37dd56f4eaa2c9fae8647d7510d5
SHA1

a426b396ba0e23e7488376ac2e5124a1df680703
SHA256

db516920264809500ef52c1b3708bec370ec32616416671d3226dd31fb74fa5c
SHA512

2ac15c2ad79e4aeb68b9c4982034e9099a8d8053ee10ff78dc72cc827158dda87c1b0865d4ebe2f42e6429be2215821dc581729352eb5fa502c54efea489f305
SSDEEP

3072:wlzaktP6ltdQe/JcMqbBMTp8/svfh/QYutcd3d:YaktYLQGpqbSN8/kh4YutKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cba37dd56f4eaa2c9fae8647d7510d5_JaffaCakes118

Files

8cba37dd56f4eaa2c9fae8647d7510d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\حسوني\Desktop\3\3\obj\Debug\3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ