a03bf09c445572b841aec478d0446e3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a03bf09c445572b841aec478d0446e3a_JaffaCakes118
Size

16KB
MD5

a03bf09c445572b841aec478d0446e3a
SHA1

9ff89b0b6f780efcc4e955a1981204e999dc7a79
SHA256

2f4522798f7b2b13d162eae59b7b978609c66f1434228dd46b392a1276205491
SHA512

a61c47a3b8a0b7c9723252f5180eb7604a75fbd43f4fd9449ad586f7347f0afe5bb5c933ce127ead1c5b6023d3cb7ab258137e99e265e7502bf34444be552cf4
SSDEEP

384:InSl4a/yL8B/24WayJLf45SQfrPDivbTEd8:Ins/yLo+Nk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a03bf09c445572b841aec478d0446e3a_JaffaCakes118

Files

a03bf09c445572b841aec478d0446e3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\winlsd\Mes documents\Téléchargements\James's Crypter 2.0 [FULL SOURCE+STUBS]\xStub\xStub\obj\Release\xStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ