61725691ba197c1b9e40f404d330f594_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61725691ba197c1b9e40f404d330f594_JaffaCakes118
Size

289KB
MD5

61725691ba197c1b9e40f404d330f594
SHA1

06741a2ed907425b4a5796bdaaa38e71704837de
SHA256

d3c60532c705a455409bacff34bc4e4fc8078a79789558c639f6a833f02c0e4d
SHA512

89948c520e4bfacf9bd63832b937678314dd579f153c175d3c824f7c0fb2d21fbf53246642d224f07a5064d4bfe9052bb30886c240458f10ea5c8f55dafe9142
SSDEEP

6144:jS4ucoWTgO8FQ64Z81CD4g8gSzrmFiMhBfuMIgSms/zMPbA:24ucoqgdFB4i1CDAVzrmFiMF0mDPbA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61725691ba197c1b9e40f404d330f594_JaffaCakes118

Files

61725691ba197c1b9e40f404d330f594_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kdglkrkjdfhslej\Desktop\OldN0$Crypter\PRI\PRI\obj\Release\Dog.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ