b4eabb31ba5395765e8a927f5f7c1a6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4eabb31ba5395765e8a927f5f7c1a6c_JaffaCakes118
Size

176KB
MD5

b4eabb31ba5395765e8a927f5f7c1a6c
SHA1

51f48360896044b6471db9079da5a7140a057ae6
SHA256

a2f7f8049f3e06d9767849ce709bc068801fd396af50ec4b719fb71fd978acfe
SHA512

8a2bdd3afbd399bb0e041a0dabb77d60f7f97d95495d1ea48f6ac7bb5481c3ab3dfaea232aa8e94a10717f7601a333945da581f7e7a2b0d154b498cc3ecd8368
SSDEEP

3072:6RYPffdTqPp9UZwfqsmWYOJzMQSZ+qQjCZcrFoCWvMCUfq2MPHUX6kSeEG820HHL:6RY3fdT2qstzsNQFZiM1q2BVS1c0nL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Crack [Safe Mode].exe

Files

b4eabb31ba5395765e8a927f5f7c1a6c_JaffaCakes118
.zip
Crack [Safe Mode].exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ