15e405ad3ad303994ee55c003a6aa303_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15e405ad3ad303994ee55c003a6aa303_JaffaCakes118
Size

165KB
MD5

15e405ad3ad303994ee55c003a6aa303
SHA1

c2bbd753dd50b1bc823fb5e7cd7ad219bffa1042
SHA256

48960e0c7aee7fb24bae54218426d31235c9cadb5e9c121b8d48f8c8a1aea286
SHA512

0a556aa6ea838c328563d5725d0f4864f3cde75993f3f6f3c839b45ce5718e79d27ccc039606173e119314ae25d7b97816d032f4e270cdacf52cb1a900d8b0a0
SSDEEP

3072:K63Q77NQchEvyOMVd/dzdk9oORe+N3FQJUxm0xeECjNZXJT9:lQ7JdEvdMDLk93NeqsjBjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15e405ad3ad303994ee55c003a6aa303_JaffaCakes118

Files

15e405ad3ad303994ee55c003a6aa303_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Stefan\Desktop\crypter for sale\Crypter\Stub\Stub\obj\Release\blah.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ