23a9f5352a47bb02e2604b39dc333b93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23a9f5352a47bb02e2604b39dc333b93_JaffaCakes118
Size

578KB
MD5

23a9f5352a47bb02e2604b39dc333b93
SHA1

e764fdf17640ef5583541df77b547cf5ed2d47b4
SHA256

5902ba380b01ec61f213b172bf6c5c15cbc39d11e475749f2cd0644b97401ec1
SHA512

c153a9262b5c83f56bcf325117640c5160bd6b839459ceaf32a9b6676a612a4a8bec535ade1bb3b4648c99ebc456bc08869be9a2d4dc774c1fe0f66282a166d7
SSDEEP

12288:2o4jlKLuNRl6O89J9eyQUMueqiec/+dsZ:d4jIORlY9LcHueB8dsZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23a9f5352a47bb02e2604b39dc333b93_JaffaCakes118

Files

23a9f5352a47bb02e2604b39dc333b93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Bryan\Desktop\Crypter\CorruptD\Stub\obj\Debug\Winfile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ