6a30cb2a2c4d7be80e6d32d68ce23918_JaffaCakes118 | Triage

Sharing

General

Target

6a30cb2a2c4d7be80e6d32d68ce23918_JaffaCakes118
Size

27KB
MD5

6a30cb2a2c4d7be80e6d32d68ce23918
SHA1

684dbd41415705a9584e9583671f61b513134e98
SHA256

18326f5284cb42ab68400c4f9955a3dc4bb32343b8ec90cd387d2c473d7207fd
SHA512

5046365fc6eb1b89ebc4eed68d86d07204a6c726804e36bf3e14b7ef425f552af2091e5137f2d7a6badbdc622a364e7b126aba42da0e1fab80a2a562d46536ca
SSDEEP

384:8a98FHvr+USL9/T1SDRhOuXdxL7241nLqQa+d8GxuYuRhQ0xhCzYcCe:4Pr8h/otXPcJJVxQzYcCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a30cb2a2c4d7be80e6d32d68ce23918_JaffaCakes118

Files

6a30cb2a2c4d7be80e6d32d68ce23918_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\HCKR\source\MyCrypter\winini\obj\Debug\winini.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ