44e31dcd5609d3be0ee013c951c4932c_JaffaCakes118 | Triage

Sharing

General

Target

44e31dcd5609d3be0ee013c951c4932c_JaffaCakes118
Size

947KB
MD5

44e31dcd5609d3be0ee013c951c4932c
SHA1

a2cf6bdaf388919809e8e728633f439c382f56cc
SHA256

a406864b7b1c4df4cdfd95b23acfc75abe3326c8bc1e0426a16de366cf8f6c5f
SHA512

2b1d440412e233c3c7f0b6546545dc4ae70c55991185f95fc0c9f5de1f220d00b840d31812be5914a988550208c39d4498928c6ec661b5fda3f6750115b13e46
SSDEEP

12288:j8+PrL2x/ECm1pRm5D2yKW4ueSFP8/BIXxuuYNJ8cQbt:LZ1Hmp2TW4ueSFP86XxuuYNicQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e31dcd5609d3be0ee013c951c4932c_JaffaCakes118

Files

44e31dcd5609d3be0ee013c951c4932c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Byte Crypter v2\Bee\Bee\obj\x86\Release\coddy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 847KB - Virtual size: 846KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ