67f124e3e90f712e2cf6fe4e1184d007_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67f124e3e90f712e2cf6fe4e1184d007_JaffaCakes118
Size

68KB
MD5

67f124e3e90f712e2cf6fe4e1184d007
SHA1

d6beecf8867f10ffbc309a341aa4e03f9d02888b
SHA256

b1596e8f9e006ebe34fc9abd018847f0b3ebcfeaff73b7a8583e0ff5f8ab76ab
SHA512

82e29da2fb5840cf19a5bbf7465b82ae6a164ad1e939257051838757d279a0d0f6384a1ad69a16bedbaf1262d536d611e61b251c19de5d7d34ff6a2082c3bfd2
SSDEEP

1536:9RsgwIShO5xwip8W8C1cXsXj9u0pIxPvklq6170Oa:9qeqOwWcXsxNIWF7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67f124e3e90f712e2cf6fe4e1184d007_JaffaCakes118

Files

67f124e3e90f712e2cf6fe4e1184d007_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dhivin\Desktop\crypt sub\crypt sub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ