0e57f9e1467b434a09cd685d0589fcf3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e57f9e1467b434a09cd685d0589fcf3_JaffaCakes118
Size

3.1MB
MD5

0e57f9e1467b434a09cd685d0589fcf3
SHA1

73748a3ba3d59ad86e63e58288c6f3ecf4c661f8
SHA256

e6f97d993f447a335999cf5248f160555bfaacc39197d82d0f5c11d1f84426e9
SHA512

4aa0666802cb2d926ca44d2e570e9cd056b0d78c12f5dfa872d35aac8d3529ae2d8ea578dd48c4eb6951948ca3dcf7bb5a8d626a17636cddd44097d23e8b09e7
SSDEEP

49152:GaZsHYZSHsum1IPGh5XtDZJDYfWrhIH0Ryc25drxtQK2wms4K096B:7hZJDYfWrhIa4xtMwmTKq6B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e57f9e1467b434a09cd685d0589fcf3_JaffaCakes118

Files

0e57f9e1467b434a09cd685d0589fcf3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Code-C4\Desktop\sk1d crypter\sk1d crypter\unique stub source\crypt sub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ