f31ba86da1a79c5dd79f40c1f8925053_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f31ba86da1a79c5dd79f40c1f8925053_JaffaCakes118
Size

623KB
MD5

f31ba86da1a79c5dd79f40c1f8925053
SHA1

0d3f809e4dc58293ca39f5fbec7dbce1dfb8a4e8
SHA256

02d3e87625377a4a93d4868cff228048ea46ad30e72860f54ecee224d24ae24a
SHA512

def0cc38e217f1d06c4547ad547741f0a0f45e6a19330e6192030cfae65e2a4ff7fd69e28e3f8d91a11a1ffc3699b9db2abc05fa6591cff1a560b8990ea461ce
SSDEEP

12288:5DVB0ckwxX2K2xZmz3mJ6kgLkgXs52NhPXPB:factvGm0bgLkui2NFfB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f31ba86da1a79c5dd79f40c1f8925053_JaffaCakes118

Files

f31ba86da1a79c5dd79f40c1f8925053_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\hawari\Desktop\crack1.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ