a43eda3858a92af6ced2bb85a970c375_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a43eda3858a92af6ced2bb85a970c375_JaffaCakes118
Size

569KB
MD5

a43eda3858a92af6ced2bb85a970c375
SHA1

5405c410e9ce9c2eec38e7b05ffea629965a2c78
SHA256

fa30dd1dc5e7dac1c5bf953c4642b5382b7399c3207146e00cd9cd0e98d5bec0
SHA512

326715d63ecfd6e76b803789547922d5a36250fcce4c81184360dfeb633dd6b657571dfbaceedfadf22e9cc6027aa841e322cf800f3e1d2cc9c0a743fbf4a63f
SSDEEP

12288:yY++mgUwoz5bubi02VViLksY2ixG9MFPk0FhMaY+6:vUwoz5bM2VVEOzxCMFPko2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a43eda3858a92af6ced2bb85a970c375_JaffaCakes118

Files

a43eda3858a92af6ced2bb85a970c375_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\H4ckmebit2h\Desktop\Canyoncrypt\MyStb\obj\Release\MyStb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ