aa8bc97b464a6b8298d9b7655f67c968_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa8bc97b464a6b8298d9b7655f67c968_JaffaCakes118
Size

1.1MB
MD5

aa8bc97b464a6b8298d9b7655f67c968
SHA1

be2a214f8d353e3e8e9ff3eb684467397c16c32a
SHA256

ea0c34bb4a676087d43df1169c5a2a4375eeed6e60a03aebd142899c5d0b356b
SHA512

4e034f9f167d7cf9458f68d64a2828283c59577d4ed2b7a0a0b9ccbd0e6370af7f4af53733cdb6520f53512a39023f74b2bdabdbfcc03e5c547e034b3557b8a7
SSDEEP

24576:1HZeRL510ueYSN1w++dBrQl6WPLRGkDLA:G71zeYc8XAA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa8bc97b464a6b8298d9b7655f67c968_JaffaCakes118

Files

aa8bc97b464a6b8298d9b7655f67c968_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\HaXoR\Desktop\Quick Access 2\Quick Access\Sk1D Crypter v4.0 Source\Sickrypter v4 Unique Stub Generator\stubgen\stubgen\obj\Release\gen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ