416230dabe5f192654b4ef4867f91e55_JaffaCakes118 | Triage

Sharing

General

Target

416230dabe5f192654b4ef4867f91e55_JaffaCakes118
Size

559KB
MD5

416230dabe5f192654b4ef4867f91e55
SHA1

73bd835e8e4b488e680a60adbf17848e771bc3de
SHA256

ce1a158667bba26226a6e53b235667e4b445a684cb9a56b2bcf15f58b3fd07a9
SHA512

4879ff4f1d95a435f06b46acf02e06ee751680c51cdaf371c0b8a59c8105934b39b716174563fd9ec924dfa4952b2af80d5805cf614696e85d3ec09c91afc172
SSDEEP

12288:A8IlPvH5qmEIlPvH5qm7TzrzEFIlPvH5qmtIlPvH5qm:AHZqm/HZqm7zgAHZqm4HZqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416230dabe5f192654b4ef4867f91e55_JaffaCakes118

Files

416230dabe5f192654b4ef4867f91e55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Kardo\Documents\Visual Studio 2010\Projects\Crystal Security\Crystal Security\obj\x86\Debug\Crystal Security.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ