32b55f3874d9557be57755a33b08670b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32b55f3874d9557be57755a33b08670b_JaffaCakes118
Size

108KB
MD5

32b55f3874d9557be57755a33b08670b
SHA1

bdce7fa119499e0decab3a53ad4ed8672ed493d0
SHA256

53f426fecb8203e53a426f29d83b8aed09cf6b4f30928fb50b4c6d53dcca0b97
SHA512

023ae1bb4868fe0ee6d88434f1ec66e8bb0a4dd4ce5d93f13ecbdd36a419e16bd158b99cc1ad032a624547a9061c01c4ffa481140f01b245634265096ac31475
SSDEEP

3072:w1PCQZKHe8fAIwgw4lAA1Bh9BhmhllVobtGiNlN:w1PCQAHe8fAIwgw4lAAx9BhmroAiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32b55f3874d9557be57755a33b08670b_JaffaCakes118

Files

32b55f3874d9557be57755a33b08670b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Alexandre\Desktop\[VB.NET] Dick Crypter source code\dependency\obj\Release\Cursor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ