465f1f49483f7335d70525601b70d03b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

465f1f49483f7335d70525601b70d03b_JaffaCakes118
Size

198KB
MD5

465f1f49483f7335d70525601b70d03b
SHA1

5bef9b898274fe41d6d9404a18268534f959b61d
SHA256

b8ab50651bee2a7cf9a6a7a80c76400608c986d974fa011be370addfc1f283b8
SHA512

6242cb85cee8437b0bcb17f0f8b5c2cca020ee1f71be7c7e8d9730b771599880920f3facad94143a3ec13842dda1786ff03f74a4787207d163c3b2d0dade9447
SSDEEP

3072:n+sqWlaPBZORUAVou19bPnkwumrjoR29xX/DQF/yggOKNctwKcQSGznXz2E:n2WlyXOR7iu19TnkwRYkfbggZrKPzn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
465f1f49483f7335d70525601b70d03b_JaffaCakes118

Files

465f1f49483f7335d70525601b70d03b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Bryan\Desktop\Crypter\CorruptD\Stub\obj\Debug\Winfile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ