8bf204dc8a69d0f42db1eb9b511689e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bf204dc8a69d0f42db1eb9b511689e1_JaffaCakes118
Size

245KB
MD5

8bf204dc8a69d0f42db1eb9b511689e1
SHA1

152c4b73bb1ea00e2c56b8391a352fb82e47e640
SHA256

62c3f7e750d8787645c2fe6829654cd966051fde6ceec2e52b8f7c381ae27d25
SHA512

11e0290ea40e5d5b7fc39cf8ffa6989d638a61023576676a0c3718710d9977f5b94a364375f634b8d66023ab81d8526a1b76c690086e456486ecc58e359e8d63
SSDEEP

6144:wydSinJTr8eG7EwKxr6oFXrzPFVvjjFw:wydSiJTr8eG4Dxr6oFXrzPFVvjjFw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bf204dc8a69d0f42db1eb9b511689e1_JaffaCakes118

Files

8bf204dc8a69d0f42db1eb9b511689e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Manni\Documents\Visual Studio 2010\Projects\Crypter-Test Stub\Crypter-Test Stub\obj\x86\Debug\Crypter-Test Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ