aff941e3d6a65ad32bd15868a88cfac5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aff941e3d6a65ad32bd15868a88cfac5_JaffaCakes118
Size

1007KB
MD5

aff941e3d6a65ad32bd15868a88cfac5
SHA1

aa3ede031b8c53cee6a0d323a49c30e5488bbcae
SHA256

a6781f35ca563225251dc28c56a5b5ceec127d92b3340be2f0af0e62b7cf2ddb
SHA512

d972a1cd949baf3c25ab4d57726d3491d0c391b87579fb8626dd0e71daa669bdd3446e59878d0585d63df4e15e9add9ed43b2a573860637bfa3e10b7e81609b3
SSDEEP

12288:nHJZpjdUJoc8gkQHZraqhfg6YUF8W309AKpozbeK4N7MVRD7AXq5i3:nHJZpjMozgFQ/i09A7beKnMu2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aff941e3d6a65ad32bd15868a88cfac5_JaffaCakes118

Files

aff941e3d6a65ad32bd15868a88cfac5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\Reformatage 27-06\NoxiousCrypter Stub v1.0\Form1\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 668KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 125B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ