0e42889e6c81e6acf56aa40cbaf0e916_JaffaCakes118 | Triage

Sharing

General

Target

0e42889e6c81e6acf56aa40cbaf0e916_JaffaCakes118
Size

38KB
MD5

0e42889e6c81e6acf56aa40cbaf0e916
SHA1

739d6979143f806f26c5603a89bad5ac028e5ab8
SHA256

76ea8fb8237c4eea7c02e7db49ee6c8e19789ed86551ed73f53b43137a230682
SHA512

40ff9037823f804ba3e5168978d842911e10b1519347659fa65c641556abc3f1b9bc365008c21bb46542183c3cf7ccfb01619444ab750f479ca06d5506a056fd
SSDEEP

768:T2Wf6/VACeNgBcPspd8yMuYCE3UR53CHG6M0Uqmd/hsuR:TDHClBYspdiuVdR12G6jUFd/hsuR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e42889e6c81e6acf56aa40cbaf0e916_JaffaCakes118

Files

0e42889e6c81e6acf56aa40cbaf0e916_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Xzibitsebi\Documents\Visual Studio 2008\Projects\Crypter\StubRC4\obj\Debug\StubRC4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ