68d07f968a3ac3426cbedeb06d045b1f_JaffaCakes118 | Triage

Sharing

General

Target

68d07f968a3ac3426cbedeb06d045b1f_JaffaCakes118
Size

191KB
MD5

68d07f968a3ac3426cbedeb06d045b1f
SHA1

8d6e2c388ded0c4eb0b72fe0e3d04f62d4f27280
SHA256

b23095034879d2a3915ccda4ff8e8987dd931790996b00d35d90326c79296952
SHA512

7046983f50e9e8d85363143e8092dd00fd78d643a9d43d507d192c0998a126eac60660e517dbc73d2f84307118b288fcb7704a0d827cf223a79f33d6c5bb2bc4
SSDEEP

3072:Ii8o8NB0DvR6L/A5OUO/ass3fifp+LNrQoIG+:Z8UFyC/H3fih+BczZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68d07f968a3ac3426cbedeb06d045b1f_JaffaCakes118

Files

68d07f968a3ac3426cbedeb06d045b1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\BackStreet.UNKOWN\Desktop\MoDiFiEd\ScanTime Crypter\1 scantime crypter stub\1 scantime crypter stub\obj\Debug\Joker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ