a699c8065d8473180c2d4ae0aa9535c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a699c8065d8473180c2d4ae0aa9535c7_JaffaCakes118
Size

116KB
MD5

a699c8065d8473180c2d4ae0aa9535c7
SHA1

3bb80a8f33055cc42692a642b518524598ee6aa4
SHA256

658250cad8629259840a61e26b52c1c776f3f97a27e75b4c25d1aa0f17c34657
SHA512

22e4784ec6fea6369fc65d686fba3147846adba468589463c222961c2fe67b1f2438e01c10991699544ec25e0071f3afaec07dc60870781e557045626a10c6ad
SSDEEP

1536:rqL2OeocHSKUG1WYorMmd3RI4YYWaLOcxe7vvE9ItOmro941J:L5nfUG1KdBdBOWeT0ItOez1J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a699c8065d8473180c2d4ae0aa9535c7_JaffaCakes118

Files

a699c8065d8473180c2d4ae0aa9535c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Codeak\Desktop\CODE\Beta 7.0\Cood's Crypter Stub v1.2\Cood's Crypter Stub v1.2\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ