949c4c4a1faf44ecc793b0bdac1dc56c_JaffaCakes118 | Triage

Sharing

General

Target

949c4c4a1faf44ecc793b0bdac1dc56c_JaffaCakes118
Size

870KB
MD5

949c4c4a1faf44ecc793b0bdac1dc56c
SHA1

115af6b747c99b5580cb9016eb94aa9b54a29e0c
SHA256

1c7eea8bf410f46623e237a81ad00d4c3c1ed4f815f08816726085fbf07a8067
SHA512

120fd29fb77a68fb009ccc8d6c9365e112949452502a3c47d02bafa9e1d3585efeb1708c4457f6705463b867ec4229caefeb31a3c879c027c1f4904550bf4d53
SSDEEP

12288:UJI4GN0IqaZGbzHrKoXQALfdt6w+RZBvy9+9v95km9i4q:US4GN7qgQH2oXHfrsZBvK+9b9rq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
949c4c4a1faf44ecc793b0bdac1dc56c_JaffaCakes118

Files

949c4c4a1faf44ecc793b0bdac1dc56c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Current Crypters\2012\2012 D\2012 D\obj\x86\Release\2012.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 819KB - Virtual size: 818KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ