aef980bcc9a1c51703fe1ee8d446fcb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aef980bcc9a1c51703fe1ee8d446fcb0_JaffaCakes118
Size

147KB
MD5

aef980bcc9a1c51703fe1ee8d446fcb0
SHA1

c36b1f0a082548694238bbe5585e3b9ebef2f3b9
SHA256

4e000a8e3181f5169f9f0bb6ec81e9104b7cb4ef02bcc5b0fcf5851bb845307e
SHA512

47e41937046569dff5f34edad6f2c101861d72b1bf4b4b876f49e44c063278b2a77a68239be7e692ad626204c103253f758301f14e3db0e0fb45ab86c1da11bc
SSDEEP

3072:N1ppM48X3HWH/k1nLBnA8VjBjU4za2hb6fY2itk0K+9ZVI0HlfZ1dqH:H/b+2HgBAqjU4za2hb6fYfO0KWV5lhD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aef980bcc9a1c51703fe1ee8d446fcb0_JaffaCakes118

Files

aef980bcc9a1c51703fe1ee8d446fcb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Sir.DZ\Bureau\Copie de CRYPTER !!\Stub\WindowsApplication1\WindowsApplication1\obj\Release\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ