95eb5e244cdc362a2bb26036d1db133a_JaffaCakes118 | Triage

Sharing

General

Target

95eb5e244cdc362a2bb26036d1db133a_JaffaCakes118
Size

100KB
MD5

95eb5e244cdc362a2bb26036d1db133a
SHA1

2f0208f3befdb95f11c22b8c62227f9a6aa23aef
SHA256

c34f47a54af4dd6f6fdb43bf55116ade47bdec3985388824f674c64ac84bbbc8
SHA512

851817f4e268ac94610eff0ef3eedd35b11a3d93e01cba0437b4d86f7d81f8b9b5887acce30bcc47eb9182641851b63dc068522ee4b5ad4c5c1f056c097d7b45
SSDEEP

1536:xvg/g+mt3NzvW5xhdQsNToTSZC9SD55r99vn5QQNK+IzvJMfX:xo/g+mjv+HTsSySHPK+9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95eb5e244cdc362a2bb26036d1db133a_JaffaCakes118

Files

95eb5e244cdc362a2bb26036d1db133a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Marc\Downloads\Vb.net 154 sources\AES CRYPTER\stub\stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ