aee6ff6d1140728bb486cc325953085d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aee6ff6d1140728bb486cc325953085d_JaffaCakes118
Size

346KB
MD5

aee6ff6d1140728bb486cc325953085d
SHA1

b0b5be90cff49580471626867773c0a6e0e79ed8
SHA256

3bb7ac665564abfbbcee1da31be3eaa34d7fdac6391c4e834e65283913fdb80c
SHA512

afc47732e4e5e7dfaed1b069d0e26e80485c5f0fa3ee5fc8fee03fc178f6431666971ab9baa14cfc019e68fd19120541ecae0bde5814aee512e9bc43f4171760
SSDEEP

6144:UgHOuof8eG3FW2g4jKI/Z1B8kWgbT3YHXtd8NOSuvynPOl1hacZCqyf0CQq1goAg:Ugg8fXg4j/j2BgIHj8cSu9l1tQqyt7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aee6ff6d1140728bb486cc325953085d_JaffaCakes118

Files

aee6ff6d1140728bb486cc325953085d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\saurabh\My Documents\Visual Studio 2008\Projects\Royden crypter\royden stub\WindowsApplication1\WindowsApplication1\obj\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ