93c9c1ab5f674836ccc282855651364a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93c9c1ab5f674836ccc282855651364a_JaffaCakes118
Size

313KB
MD5

93c9c1ab5f674836ccc282855651364a
SHA1

e4bb96c9a68e2cebe799154a15f617887b2a79dd
SHA256

77bafc280733cc10cc3fa207663047e08612dff37ad99496f2d061b7dea6015b
SHA512

26fe861943ac2b5d71d5407764c5d7dbd5c99a8a60c1a6553fd4680e17f76c02331b8c7e6069903e0d7ded0eefa9fb74aba94a09a11f6dd956d641c6c44b14a8
SSDEEP

6144:+3srf6KckptveD3iQv/UVhXTSzwTDh1mTUqhi89euVBnV/skcB:prf3Tk3iQvc3TqwTmhi5kJJZcB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93c9c1ab5f674836ccc282855651364a_JaffaCakes118

Files

93c9c1ab5f674836ccc282855651364a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\David\Documents\Visual Studio 2008\Projects\Nesquick Crypter Stub\Nesquick Crypter Stub\obj\Release\Nesquick Crypter Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ