5ce467fa4eec72e43ab5b4e5d5e18060_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ce467fa4eec72e43ab5b4e5d5e18060_JaffaCakes118
Size

267KB
MD5

5ce467fa4eec72e43ab5b4e5d5e18060
SHA1

a423e6a93b2ee500e30a10a85aeebf750cbe5143
SHA256

7458795bfbe321345fc570a6e61ca06881a30f0a65e6b717d4d68dbe7b73cbdb
SHA512

e7165006ae91ffa5c6e363a33cec7bff75c16ce3a0325195d44cc4a59f9f8b695c3863f2b30154c05d1d7db4e658081c2917a15ea527f589a322fab1938adf67
SSDEEP

1536:t0HjDiJPq6Y1kb4CWaLXk2ikbfmYs0HjDiJPq6Y1kb4CM0HjDiJ00HjDiJH:e6hb4CtLXBiCfmYh6hb4C7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ce467fa4eec72e43ab5b4e5d5e18060_JaffaCakes118

Files

5ce467fa4eec72e43ab5b4e5d5e18060_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\KOMPIK\Desktop\WindowsFormsApplication16\WindowsFormsApplication16\obj\Debug\H2W-CRACK.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ