1b6ec3551183433122dfa7299f528857_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b6ec3551183433122dfa7299f528857_JaffaCakes118
Size

96KB
MD5

1b6ec3551183433122dfa7299f528857
SHA1

392eae9ab327192d73febabb5ad04e5d45d07004
SHA256

1b95c0408fb13028ce1bda6aa74dcd1090db438dbded93f52c428e8a76401f59
SHA512

0853e09553cb1f2125eb063131825cb48a61424d5fd100e382a8d8f5b6769c33a438522785a2de689e141c412a066b2e1c68410823a002420356e13f138022f0
SSDEEP

1536:Wn9syC76NZPcG9HR5mWVFcn+qcA1xbqf1mxf5Dl9wGrPOLm/N:Wn9S6NZPcuxBFwbjefwzNrPOLo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b6ec3551183433122dfa7299f528857_JaffaCakes118

Files

1b6ec3551183433122dfa7299f528857_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Users\Bryan\Desktop\iKrypter\Service\Service\obj\x86\Release\Service.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ