71efb04a34fb822aaef8f9e49358958a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71efb04a34fb822aaef8f9e49358958a_JaffaCakes118
Size

394KB
MD5

71efb04a34fb822aaef8f9e49358958a
SHA1

60d9746be0c0b57e413ea2ebece9d48b0f63814e
SHA256

1c99ace9d4f9259682f9ffb9944904f626d39f632b967afd83fa7334f00969c3
SHA512

2c347ee4b0521e1723397993e24e9ac1022876d63a0d6889f24e80647f4ddec7f089496441ff96c76f448f013306d97259ffdfd4183ee99c6e936958506e8ec6
SSDEEP

6144:qORSwbF8HOKB9o3gPFt7geam2XFMjZACC/k8Zi2AdhS7FfjUMVNEw3e2ThSxT/al:XJGOKI3gt/GqinAijUMV2wBkT/azlc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71efb04a34fb822aaef8f9e49358958a_JaffaCakes118

Files

71efb04a34fb822aaef8f9e49358958a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Simon\Desktop\Simon Crypter Stub\Simon Crypter Stub\obj\x86\Release\DPCS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ