a74942a4dab6bc48d487474370282d66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a74942a4dab6bc48d487474370282d66_JaffaCakes118
Size

426KB
MD5

a74942a4dab6bc48d487474370282d66
SHA1

2bc693c9e12523a2f5741931ac00a34dc1413e1d
SHA256

6585a5640e872f51148b6cbb7d03fab9a5052276206a773e42977595c0fadce6
SHA512

4fde2078bc9c8fbe114f9af1d519f766dd43978362d347f744403c36dbd632fb8b6346c3d3715e77cf5c57207cc51526a613df057245b2dbe2d95510325ef83a
SSDEEP

6144:Lmos8ARqh1XpXoq8+ZJw4/gsP40nZY3fWrVECBzoJjbaW/:Co39rXpX3TZJD4uZ8fWrmCBzOGS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a74942a4dab6bc48d487474370282d66_JaffaCakes118

Files

a74942a4dab6bc48d487474370282d66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jeffy\Desktop\jcrypter\crypt sub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ