a5443679f4d5d45acc956459fd0010a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5443679f4d5d45acc956459fd0010a6_JaffaCakes118
Size

320KB
MD5

a5443679f4d5d45acc956459fd0010a6
SHA1

1886966f5e80064100aa00304b08d57682cae0a7
SHA256

bd7941fdba16c7c392f81e431ed9494e48d0c8bf3db6f0ec8e207c280d021f96
SHA512

6e55a26a27be3ff21234660b4cc421e8f733b6b9c9ac55a25446d06463d614d03622750955f3b31abb51a4069148d87c67064129ab3c17923a970984955248e8
SSDEEP

3072:mN8P7/cTVZD+byk8yETxhKIWCbYjDT8j7RFek8yETxhKIWCbYjDT8j7RFwca92wV:T2VZSbXb8QIRqaP7b8QIRqaPwcyL8Pa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5443679f4d5d45acc956459fd0010a6_JaffaCakes118

Files

a5443679f4d5d45acc956459fd0010a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Current Crypters\2012\Services\Services\obj\x86\Release\Services.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ