21120222d94483cb11f68d431624ba94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21120222d94483cb11f68d431624ba94_JaffaCakes118
Size

445KB
MD5

21120222d94483cb11f68d431624ba94
SHA1

8fbb4410a6725a6d9cef054bda4114e4b6f7a2bd
SHA256

4956c7955ba53a96ea6e04381bfe8845460fd9cdb2f58399ae6cbe049f305123
SHA512

189286a2d22b716271cf05de83158bfe65bd8bf1ca35580c100e99f0ecb771fb4ed3ab1c2ed8f04f3eed7445e1482a4242fb38bebc756c4153d8a4fe70672f48
SSDEEP

6144:h9K+gV95o61lYkvvAwO9boDbmbx9tycm39Ztun7aCFMJp9KM61Tav1S:h9K+ig61ikvvAwOhHc7keIkn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21120222d94483cb11f68d431624ba94_JaffaCakes118

Files

21120222d94483cb11f68d431624ba94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Donk\Bureaublad\MoonCrypter\MyCrypter\winini\obj\Debug\winini.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 418KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ