72bd1852bbc8dbb0896bf465d3d83a88_JaffaCakes118 | Triage

Sharing

General

Target

72bd1852bbc8dbb0896bf465d3d83a88_JaffaCakes118
Size

1.0MB
MD5

72bd1852bbc8dbb0896bf465d3d83a88
SHA1

83ed39ada7e306bb5632e89e6394ddce9693ba95
SHA256

f89a79af862db0da73bac4d983c13c6eed83d2059fa9f74d0e3f7419b4892b60
SHA512

d161b81847e935163e62ee6f803a72a3cfa2f5ee925e0e63f926720b5a0dc0cd82e534549e875db4452b8e4db5bb1e118d15552ef810f2a1734e79d3efd277a4
SSDEEP

12288:ZiRJIKYzPLAw8r6n9rxLc80ePuLI47GkAOG8o5WAOdFaSWXTrrp:wRJ1YzPLAw8rW92VHD7mOdFaSWX/rp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72bd1852bbc8dbb0896bf465d3d83a88_JaffaCakes118

Files

72bd1852bbc8dbb0896bf465d3d83a88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Current Crypters\2012\Service\Service\obj\x86\Release\Service.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ