JaffaCakes118_0371221c3aa1147d1009f0d0b1bf22e8 | Triage

Sharing

General

Target

JaffaCakes118_0371221c3aa1147d1009f0d0b1bf22e8
Size

144KB
MD5

0371221c3aa1147d1009f0d0b1bf22e8
SHA1

5f33bcfe0070b7ac3b4d527103bb4a9385603de3
SHA256

d34a32b1c044553ab8b803f4370526f7a73d1cb519adcaec91b2c10efaa556b3
SHA512

a42bb69676da8c267a8f5b472cbba1ba408a553f919d8536f0a4e8054da914b5aa34089744301acf9eb5d993881955dda478ee2c5b663a945c8aafccef1a9eab
SSDEEP

1536:8qJo6rUcu/rbPm8J+Ud+kR2qBa5z17gm6zG:8SRw+Ud+kRBBa5yjK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0371221c3aa1147d1009f0d0b1bf22e8

Files

JaffaCakes118_0371221c3aa1147d1009f0d0b1bf22e8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\almhma\Desktop\Vb.neT ProjecT\Service Network Windows\Service Network Windows\obj\Debug\Windows Defander.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ