3dc83c6c9adece896737f8af37d11727_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dc83c6c9adece896737f8af37d11727_JaffaCakes118
Size

540KB
MD5

3dc83c6c9adece896737f8af37d11727
SHA1

4081e64df739fa8e5b10e229aab7875c0f7df2c8
SHA256

fcb31edb42d14fd2e0c46fe79c358be80eb3b07694b8da17e6ef3433423cfa0c
SHA512

0089bba5dec21cd94b4c9a5601d9119ca97c5bb81bffc9eb62d8122e9d892a0aed08d37461be7dd5fefa2fb8d0c4f299791781d93005c98b089e7791184a8269
SSDEEP

6144:VMJPvAvjMUOGawnjKxx75aGn8nqZUqEYHBhiSbx:VMdvM08qvHLP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dc83c6c9adece896737f8af37d11727_JaffaCakes118

Files

3dc83c6c9adece896737f8af37d11727_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Jean Marc\Desktop\Programmes\Cyber Crypter V2.2 - EN Version - SOURCE\Cyber Crypter\Cyber Crypter\obj\Release\Cyber Crypter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ