16251b7e4b1019e205ae32ef2451aec6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16251b7e4b1019e205ae32ef2451aec6_JaffaCakes118
Size

458KB
MD5

16251b7e4b1019e205ae32ef2451aec6
SHA1

b39ee64aab8148c6500ffb3f53c25d87653d6d23
SHA256

07cd7940f0175814ed2b08d132e91ac9fb5e47dcafab5705c3d1662e2df3385c
SHA512

a593a55575a4f4e25e4c70af9f1c3afe0ab740a05668948b968fa04a160e9163f7b39b3940cbcf79429cdbb857ee62b33b9211f02eb284cff36a4f91ad619a10
SSDEEP

12288:s8RKDzkoANKjuogatcBDeA4HK4kcb7Sygygygygygygygygygygygygygygygyg7:7R6zkRoztcBDgZkc3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16251b7e4b1019e205ae32ef2451aec6_JaffaCakes118

Files

16251b7e4b1019e205ae32ef2451aec6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Admin\Desktop\Blackout Sources\Blackout Crypter 7.5 + USG 2.5\Stub - Copy\BCSHIT\obj\Release\msconfig.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ