b660b60e4af581048f094b39de28bf84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b660b60e4af581048f094b39de28bf84_JaffaCakes118
Size

50KB
MD5

b660b60e4af581048f094b39de28bf84
SHA1

09c0cc4fe5426a75b9bbce2d5e0d5bb80b882b93
SHA256

8c6103a4b19cefa5258fa10a468dbc30e2658e949f86cc8712fc01407689981b
SHA512

22874849953ebf2fa98d8f1354c2fc819aca0e2282fb6b2c0622a11788e2735ba16750a6ec908b1f71021e82b2578ecf240f3c8528df338ba6eeb601d442a9f9
SSDEEP

768:PqEKpn+/j9UdaVcVwRuRnjtsjFAW7sVCDqLlqZv+lJJYYYm7BNBZJmL+DueSODep:PBAnTj11YMHsJVSVZ1+Y+VYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b660b60e4af581048f094b39de28bf84_JaffaCakes118

Files

b660b60e4af581048f094b39de28bf84_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\zhang\Downloads\AG3-master\AG3-master\AnarchyGrabber3\obj\Debug\niggercrasherbypassv1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ