ae345835b569446eec3ad901b2e31231_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae345835b569446eec3ad901b2e31231_JaffaCakes118
Size

370KB
MD5

ae345835b569446eec3ad901b2e31231
SHA1

7e2969eceb41130edb7ab0762062565d96b26fe1
SHA256

5c340c6b0080d6c13e82c1a5b8880c863ab83f6227894cd4403874543ce20ae0
SHA512

0b7093be909d29fb57d1ed2ad3dd480140516eeadc4541cd9e3147d3d5c512e6d88490ea29aab6de811ad5aa23c07f1186e6d3bab8b6c97fd1e751154d003ff9
SSDEEP

6144:A+1gqPXZh6Rcj+cpR2ZFwmaPs5IG4TlpQ2D6ClUEHuLIM3CSPCBnE5EOqmZwoOhL:A+1geXZh6Rs3p66m8s5IdpQo3nukbE5u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae345835b569446eec3ad901b2e31231_JaffaCakes118

Files

ae345835b569446eec3ad901b2e31231_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\My Project Dot Net\DZRYPTER\Copie de stub\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ