2ccf8bbcdc3deec798acf72aa7626d82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ccf8bbcdc3deec798acf72aa7626d82_JaffaCakes118
Size

931KB
MD5

2ccf8bbcdc3deec798acf72aa7626d82
SHA1

434b2bf2e87053e849c2fe05f15c4d11610fc887
SHA256

4643bb57d271fe5d411c53e390ec0082c043420ce957b68f27c8c7b9b5016519
SHA512

73c3c05845ddd1b2a26da0354b312eadc479adceb0d2db8ce4f44bf59d45f1aa66c99b20490c36b68d0cce6153607cc74081e4fb39f01ba5b3f2ca17d8c56f01
SSDEEP

12288:OwR37KMUYC8RoAiYJIApBL5YuyKVRE+AxNOFmrJqb2gibABpNlnu38d3s:v726RoOJIAXN18LCmrJqbZP9u38d3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ccf8bbcdc3deec798acf72aa7626d82_JaffaCakes118

Files

2ccf8bbcdc3deec798acf72aa7626d82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\Programmierung\Codename Tritium\Projekte\Free Crypt\Ressource\obj\x86\Release\Ressource.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 873KB - Virtual size: 873KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ