76334a11c76ad040894847eb15d9341e_JaffaCakes118 | Triage

Sharing

General

Target

76334a11c76ad040894847eb15d9341e_JaffaCakes118
Size

86KB
MD5

76334a11c76ad040894847eb15d9341e
SHA1

b274d905a2cb3054de69f62543a67f5451326476
SHA256

254161528dce87deb3733c9a2b978974a168254ae4ad338ce8795b4bcb885828
SHA512

d56dae08bb4383d22fdc6a1ba8e40be56ea9998695c99ad25d4fc8992bc13685249d01b5dbfc46a5c4d20856edc78d991e9d2cc872ae4a411dfa47a5193bb599
SSDEEP

1536:QCKsZ2fvr3i6EBXlLOUpLINi64RxOfhBqVsgLEiXnYjPVzR:QMZ23kLOUpLI+mZGsaEiXYjPVzR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76334a11c76ad040894847eb15d9341e_JaffaCakes118

Files

76334a11c76ad040894847eb15d9341e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\vb.bick\crypter stub\crypter stub\obj\Debug\crypter stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ