fabf76b2290ce3b070f4f862ff5b08bc_JaffaCakes118 | Triage

Sharing

General

Target

fabf76b2290ce3b070f4f862ff5b08bc_JaffaCakes118
Size

285KB
MD5

fabf76b2290ce3b070f4f862ff5b08bc
SHA1

7670a3a7da38e212019fe190670ca4836e6e86e4
SHA256

afd1d5c7b1f700bef94a6ae16aad7da36cd48720ffc475665d97ed06b32353d4
SHA512

ae57174baab6af6ace7ae36d2938e10c5268141815d8a50deefc77e1fddd3a1feb6b9647a08807a8a468160411709f529cad4e7c37f3e5bb36fa92344ba7614f
SSDEEP

6144:F2m6Q3jf9iKjyPPow2tampwBWT57wXpgtJKaasCuAWC4:TMKjwP6DpwBg7KCHKa4uAWC4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fabf76b2290ce3b070f4f862ff5b08bc_JaffaCakes118

Files

fabf76b2290ce3b070f4f862ff5b08bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FEDERIKO\Desktop\Osmanlı Stub\Osmanlı Stub\obj\Release\Osmanlı Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ