641babcf2cf8b8b949efecc95b96da4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

641babcf2cf8b8b949efecc95b96da4b_JaffaCakes118
Size

400KB
MD5

641babcf2cf8b8b949efecc95b96da4b
SHA1

c9d92b3d6302a9058440d6e2355b4bfabb9bfcf6
SHA256

7556d5c7218238ce22799f6baa2767766d9bff22baacc8c2037ea053adaf8862
SHA512

5cbe7bfe343fbb24a790a50eb7d7853d010f5d09cd7972ff9aa8c22744d38061487e645bfcf71458860d887939d2332b026d091fee70315173d542bda2ba1c94
SSDEEP

6144:Rh/72PFqDWXDCjeCqjWL2pGXv/y9KOcX+vWNcZ28doeSM0z0gwj+wyHE7zdgFY0:RxSdkWXDGdSS2sX4IKE4/d3SR4kEqC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
641babcf2cf8b8b949efecc95b96da4b_JaffaCakes118

Files

641babcf2cf8b8b949efecc95b96da4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\P C\Desktop\Infinity Crypter v1\Stub\Infinotion\Infinotion\obj\Release\W0(@#()!JUs9aojdias12.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ