384697128a42a0ec11774dfee4b97980_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

384697128a42a0ec11774dfee4b97980_JaffaCakes118
Size

97KB
MD5

384697128a42a0ec11774dfee4b97980
SHA1

edaa9af8b0125c4d7bc687951ac2a5b02f5f61bc
SHA256

f448c70e35ce5d1ce1ff7074cfa4bdd5b72b39b703aa3962b240fde5fd5fb8b6
SHA512

45ce9d8f3a2e0d5c88a6a9ed78c5409f2aa96147315cd3a95eaf3403722ee19215a413725f7274bf4a33f6ca2f98b558489db4d8cdb6bcf442c8e2661f696c28
SSDEEP

1536:ouqdrWK8eyVQMZZl9HSzSFSnLF6CCgzdd5/fmkHE+nXwLxHszj8ce7dJGf9m71:ouqdqcsvl9HSzTRBCu5XhH+xHeOnp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
384697128a42a0ec11774dfee4b97980_JaffaCakes118

Files

384697128a42a0ec11774dfee4b97980_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Current Crypters\2012\2012 2\2012 2\obj\x86\Release\2012.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ