aba4cd0e10afd420177b20c918527833_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aba4cd0e10afd420177b20c918527833_JaffaCakes118
Size

711KB
MD5

aba4cd0e10afd420177b20c918527833
SHA1

1ee70283cd69151a880db6eb1b42ef48bb56fc7c
SHA256

4140bf33dc931cab89b7e84968b05561331b84b1e3226ecb82caf8df5a2a1e87
SHA512

b8706c1da303b5e9f4bd696ef3162075cd0fc4099b2707de587915c21593d70527e5b411fec1f362be81cf69c09d0f4d79cabcab4b2d6230fc5decbe6a871264
SSDEEP

12288:4yxS9v+WsjURLNN1wJxoooAcpct69uFtSufQlR/glJOm0jyJ:4yCF5NKvosH3ouIOOmGyJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aba4cd0e10afd420177b20c918527833_JaffaCakes118

Files

aba4cd0e10afd420177b20c918527833_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\irishboy\Desktop\Version 1.5 Final\FowlCrypter\FowlCrypter\Stub\stub\stub\obj\Release\business.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ