4ca5510fdeb807100b18e4107aed4aac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ca5510fdeb807100b18e4107aed4aac_JaffaCakes118
Size

1.2MB
MD5

4ca5510fdeb807100b18e4107aed4aac
SHA1

6383e8e2ad4f018546c361d929c67ac250959618
SHA256

1c03cd8e9b93656ac907ec14b3eecad3ee75c4e7e5595224d2e56fc71cf2fe04
SHA512

476df4a7ca6fa3572d584144d5f80a29f093138ad5dce172474fed941490678296b60a2ef0ea96a958e332285e2403e18fc05eeed7e8b96e7421c98435d153a6
SSDEEP

12288:hmeYOFrC4liorZPivY2EWABlClaM8Wk/yN53/YpligpGbEciaV9ZfLcJ:JtFu4liUE9EjBdmL3/lxVHfLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ca5510fdeb807100b18e4107aed4aac_JaffaCakes118

Files

4ca5510fdeb807100b18e4107aed4aac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Benjamin\Desktop\Dossier des Crypters\Code source Kurtix crypter 2010 [Devil Edition]\Bombe\obj\Debug\Kurtix32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 998KB - Virtual size: 997KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ