ae383e3707af91346f4fcc968dd1a5db_JaffaCakes118 | Triage

Sharing

General

Target

ae383e3707af91346f4fcc968dd1a5db_JaffaCakes118
Size

953KB
MD5

ae383e3707af91346f4fcc968dd1a5db
SHA1

704efa833c46f50b3b81a287f8bd6efb667855d6
SHA256

ab6bca7771244fa536ae998bcfd086eabbe92175d67bf907c94de79fe250842d
SHA512

bd87271b17d9321afe45e9ad6ec48d01b8c0dbf149a6ada1dc3d2cb28f7be9fb3b60a714512489ed8e66203077969ee9d9396358f3983f138dc9a1583016f953
SSDEEP

24576:wSyYxSeNTKSAUQxCcE1R51uw1I54fqR72z:XaR7I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae383e3707af91346f4fcc968dd1a5db_JaffaCakes118

Files

ae383e3707af91346f4fcc968dd1a5db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Current Crypters\2012\2012 D\2012 D\obj\x86\Release\2012.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 902KB - Virtual size: 902KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ