418b4b0d20420a003fc6d2408776a78c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

418b4b0d20420a003fc6d2408776a78c_JaffaCakes118
Size

16KB
MD5

418b4b0d20420a003fc6d2408776a78c
SHA1

c75cb1795339e1bfaed4cc8303be7b5a5bd271a6
SHA256

e1570a823667dfe55f75f7edc71f312a0cf086ba3de22e11f49b9f02c86c1a1e
SHA512

b8e9fd04ed71b782691519d2919da7ff831e283e650e066e5d507599707effef367cda0cc413ed1e1dbbea89d525907a425f3201710cc7feac91abd0aa481fc2
SSDEEP

384:jn5XJfWchviKbD2ytdxLf45LQfrsLXu8jaXxEfo:jn/fWkLbDPlIIxl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
418b4b0d20420a003fc6d2408776a78c_JaffaCakes118

Files

418b4b0d20420a003fc6d2408776a78c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tony\Desktop\1 scantime crypter stub\1 scantime crypter stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 143B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ