3637b89b269ece42b4ce7e581c0f52a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3637b89b269ece42b4ce7e581c0f52a0_JaffaCakes118
Size

299KB
MD5

3637b89b269ece42b4ce7e581c0f52a0
SHA1

3d05ddd082603d6784fc2f499f20922949d35779
SHA256

69967333886d1b40b2e00d9bddca3d6c257f22f27217470086ae721d802e5464
SHA512

86379be84d126c70bccd29a18508d24bebbd794a3b8190ae325cc7dd8d50e9466e6b6b81d6b6e028e19775a95b958245610d7b6f4253a526866b8f93ec0a4d58
SSDEEP

3072:Ii8o8NB0DvR6L/A5wjTjaNBEATFCLbLfQSxwFKwY4mf1/BJHLYbkTLrL4BC9DfSi:Z8UFyC8uf4LISqKwpmvBkbkTLQ2eA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3637b89b269ece42b4ce7e581c0f52a0_JaffaCakes118

Files

3637b89b269ece42b4ce7e581c0f52a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\BackStreet.UNKOWN\Desktop\MoDiFiEd\ScanTime Crypter\1 scantime crypter stub\1 scantime crypter stub\obj\Debug\Joker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ