3d946bb987829fdbf681dedf086afd4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d946bb987829fdbf681dedf086afd4b_JaffaCakes118
Size

193KB
MD5

3d946bb987829fdbf681dedf086afd4b
SHA1

f0feb3653f27d37688bfd47623522e4db4241952
SHA256

63bf196752508194d34c1f58f396c83d752f2ea1ac023c935ecc1f6619e25335
SHA512

ab3defece6568cab91a77f7738e0fc25c344a1d05cff47de7ac0d71cf411a5a90c3c949291e5cf17ab27493aebc1eb82cedc84790af6a569018ffceb88895ec3
SSDEEP

768:1u/JJR6h8iTykrsNS6JHGkBe1udxOVjEjZTAmMK+yIu/:0/f08wNrsNEudxAjeNAmL+U/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d946bb987829fdbf681dedf086afd4b_JaffaCakes118

Files

3d946bb987829fdbf681dedf086afd4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Stefan\Desktop\Bought Crypter\Apex Crypter\Apex Crypter\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ