2d8b114f6f5e56572428e16915d02afb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d8b114f6f5e56572428e16915d02afb_JaffaCakes118
Size

361KB
MD5

2d8b114f6f5e56572428e16915d02afb
SHA1

cb1c9bae4cd5479d16af4dc4956cf96ffcf8c91b
SHA256

96f885f862d9e8881a5cc2510607bf8f49db2045dd951b8ad5d7718a69f37a14
SHA512

51cc7e1599602a47722691b64a98594724ae2a5e9a08a92fdac586e783d988076280d83766bd318c068555eff591a0f795788b0fd1b06ccfb3221ded81dba919
SSDEEP

6144:mk4UOtLwEDWOnwB/PpfO9LGqE/kioX4Mm67KRcwABVsVeDPtmPsHeGFnVFC7vHN5:CUOtSWwBJfLkwZRrABOAPtmPsHljiHN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d8b114f6f5e56572428e16915d02afb_JaffaCakes118

Files

2d8b114f6f5e56572428e16915d02afb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Christian Natis\Desktop\Programing and Hacking\Programming\VB.net\KillerTHC Crypter Stub\KillerTHC Crypter Stub\obj\Debug\KillerTHC Crypter Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ