41d7360c6a0afc47e02918bd382162a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41d7360c6a0afc47e02918bd382162a1_JaffaCakes118
Size

374KB
MD5

41d7360c6a0afc47e02918bd382162a1
SHA1

81f9d5f4876dc032ec0c1009a35efd518e050d25
SHA256

e5734df0c4087074f3f494bf3352d2d7f47e65a6e36506f6530cc3277f4f8bef
SHA512

636e9222acd23d86d52b6577c502c18b379c858390f733ff4f9db9c455ec04e545017e0c583dcad996b9e373081db49ea53d297e734733ed9c5186e295bb8996
SSDEEP

6144:v0JS/9ZkrBjNi+6rcqR4SpaEovJgXFlASZ4HQi1u5MMiYYZMoWJG9DIj0DyQAHed:8JWkkrpzfXFlt2wi1u9iIRQi0DyQAHed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41d7360c6a0afc47e02918bd382162a1_JaffaCakes118

Files

41d7360c6a0afc47e02918bd382162a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kdglkrkjdfhslej\Documents\Visual Studio 2010\Projects\OldN0$Crypter\PRI\PRI\obj\Release\????????????????.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ