ad21112e0b8d1f3de209e77900b81ece_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad21112e0b8d1f3de209e77900b81ece_JaffaCakes118
Size

932KB
MD5

ad21112e0b8d1f3de209e77900b81ece
SHA1

b9435461f8f85f10aa68c8b1f45f31bc22db7c2f
SHA256

c63f7b3292b3493d25c8dac953eb4faaef86b9c05ed9d1077709ee2f61120924
SHA512

fb8138b2c54d58409c5416404460573abad7496d4e3703236a60fca89fbe6a5d87d282581ba4f92fb0e1d226ad3a447a7e1cf1b73d5522864e9b2ab632d76d0e
SSDEEP

12288:ry1ZnmW40vNgjV/xucmZCe/ZDyWpnnhPLSzrVhez/8AJAXb1D7Pb6fRToS:rLxuNpxeghPLQrjeZAXb1D7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad21112e0b8d1f3de209e77900b81ece_JaffaCakes118

Files

ad21112e0b8d1f3de209e77900b81ece_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Vipermakd Confidential Folder\Tuts\VB.NET\Warning [Property of Aslam Khan]\ScanTime Crypter\ScanTime Crypter\1 scantime crypter stub\1 scantime crypter stub\bin\Release\New And FUD stub\FUD Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ