121bed532f6ca40db5f39a572196060f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

121bed532f6ca40db5f39a572196060f_JaffaCakes118
Size

151KB
MD5

121bed532f6ca40db5f39a572196060f
SHA1

3ae8e1ca0695252efd241af776c07b8a7e4e7d7b
SHA256

bee366d71b0a1732a044fe8a39b822bddd3a15a7eae4d718270ed4bc99216b59
SHA512

8324b8d71c4ac8234c855deb46d139ee406d54af7a5a138b91b6a41b25f03b4e75602110f89d2d8ab0f288849d1099b239342bc3949ec6008d3856e35e322cda
SSDEEP

3072:YvhURmIthmPOeyeN2CDA7LrlCXsPSwgdJeSzqAN8rNNp+:YoeF2C83lpStdhO88rNP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121bed532f6ca40db5f39a572196060f_JaffaCakes118

Files

121bed532f6ca40db5f39a572196060f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Gaming\Desktop\Plasma RAT development\Plasma RAT 1.6.1\StubAdmin.bin.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ