22ed9ebed01ce70a0379aabb76c8679a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22ed9ebed01ce70a0379aabb76c8679a_JaffaCakes118
Size

746KB
MD5

22ed9ebed01ce70a0379aabb76c8679a
SHA1

1f0d44d502bdec0b569314e34db64971385db73d
SHA256

42aa98c0023f3e63bf602d1ecce74d73021e9640e5db82c0b26cc8e345fa7597
SHA512

270bbfb5b525b5634cee8aa26310c3b9908376502e72f71f8c288eeb2aaee2bf6db67088677eead8fa4039f9617ba0f27725048bcae54f776721bd8478cc772e
SSDEEP

12288:cojCey90dFOA/yn/45i2eaUsGYypz2QsYc4c:Ry456/45iqjyz2QsR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ed9ebed01ce70a0379aabb76c8679a_JaffaCakes118

Files

22ed9ebed01ce70a0379aabb76c8679a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\jhfire\My Documents\Documents\Crypter sources\ScanTime Crypter\1 scantime crypter stub\1 scantime crypter stub\obj\Release\ikkJt0aIGG6PbfxVrM.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 380KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ