6086256e1585ba6342c3c5fc983714e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6086256e1585ba6342c3c5fc983714e5_JaffaCakes118
Size

446KB
MD5

6086256e1585ba6342c3c5fc983714e5
SHA1

fa2470af7ed94cf2c64c9d40924129001470ae52
SHA256

450d75f1cf4364c85fde09b52abeb893282d1818328dab43a64c4b15cb3e4a0a
SHA512

b5600a877a33bbbc3ff2a462df801a83d2e53e078ff7f2c6e7faf5946ec19277a24017a7b51b53aef5bef4f5052989585cf04030b5e3d4117c3817ab9722854f
SSDEEP

3072:1pwFa2xCgLriH55Bj7/f4WasMchq8nQz2cdpo2Zz:1pwFa8iV7ZthRnQz2Yoy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6086256e1585ba6342c3c5fc983714e5_JaffaCakes118

Files

6086256e1585ba6342c3c5fc983714e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Joseph\documents\visual studio 2010\Projects\LimeCrypterPro\LimeCrypterPro\obj\x86\Debug\LimeCrypterPro.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 441KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ