c5b10bcc461e98a34552da268092c4e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5b10bcc461e98a34552da268092c4e6_JaffaCakes118
Size

10KB
MD5

c5b10bcc461e98a34552da268092c4e6
SHA1

11c9517edee0490aa7cbc241cdab4d1dc1342e94
SHA256

730f95d682674a7df4f4200bf4c0876301b980119e977e88fe4bf867b32dcc2c
SHA512

a9f69d287e74339c67028daad3c381d94a1cec97192c05cbf1ddc92a66f456f14a4fb7ec215c4650a7f7ea8ff16c83632ce5db2a30a58bf0d7253ca9f126bc44
SSDEEP

192:/sT/S9JLMi3dgjHQgM5+xz6L6MV8881888818bBfG:H9JLMmdgjHQgM5O8p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5b10bcc461e98a34552da268092c4e6_JaffaCakes118

Files

c5b10bcc461e98a34552da268092c4e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Crypter\Desktop\piratexd\src\Injector\PirateStealer\obj\Debug\PirateStealer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ