3e24dc2dd465a57313d1430513102898_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e24dc2dd465a57313d1430513102898_JaffaCakes118
Size

147KB
MD5

3e24dc2dd465a57313d1430513102898
SHA1

00e1c5e72d9906a4693d84037ab85bd864bce9fa
SHA256

c5bb64820c275d44109c0f582824c6ffabbb733f0f79902d1514e8e89da81d0d
SHA512

a1a0670c4bf53bb4435d2be0db78f3bdbf0455fcfccd93fabc8726cc617cb70d1d45f4a2526614ff33191f8e951f65338260335aabc0692a0d25c0be08d0f64a
SSDEEP

3072:W5amaphAjVd1nut+uV2mTVDjFwkWl176jZ1hCagdgvPWe:W8QVdRQ/vqkg1gEagdgH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e24dc2dd465a57313d1430513102898_JaffaCakes118

Files

3e24dc2dd465a57313d1430513102898_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tdy\Desktop\iKrypter\Service\Service\obj\x86\Release\Service.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ