a1d1489885fb6f1a8d8b66dc601de047_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1d1489885fb6f1a8d8b66dc601de047_JaffaCakes118
Size

360KB
MD5

a1d1489885fb6f1a8d8b66dc601de047
SHA1

3d47351a0bd3e4da71b181f1d3ce95821e3777c8
SHA256

75daefee6b91a5d3c14eb061c03018ac6574857efcb577960c6afa560dd236a2
SHA512

cdcd2036e0e7268aa32d58f68e269a083bc868140b6abd22c9ec9ca5e7a0f0ac7dfc99603d3718be2bf0f19dd073b7414ecf2938da76dbcecb1e04d18346cea6
SSDEEP

6144:D0JS/9ZkrBvt+Rwks5wQn1PQMREIQNS8zXgZDWcgPhvsA4AKjz0/Rr4r/O:YJWkeJcwMpVZQVIaPhk/AgY/Rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1d1489885fb6f1a8d8b66dc601de047_JaffaCakes118

Files

a1d1489885fb6f1a8d8b66dc601de047_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kdglkrkjdfhslej\Documents\Visual Studio 2010\Projects\OldN0$Crypter\PRI\PRI\obj\Release\????????????????.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ