affffb6090578c80391e63c83ea6a8b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

affffb6090578c80391e63c83ea6a8b4_JaffaCakes118
Size

656KB
MD5

affffb6090578c80391e63c83ea6a8b4
SHA1

24a55f106f0f9d3034817abbef3e7cdb746e5b08
SHA256

8e24a2c92a47620c46cc3fc3a83b67a65de7560072c9e4d7d7c168d0a42e5552
SHA512

cb4e2492e8bab1b9fd3300225148cb3b5f27e4828fe69bb3d0ed81d52de952d960f11d272bfba0a086c5f3486ebaa5cd796f6cfd2cf725f58a184f17d29caa4d
SSDEEP

12288:KkuqpcwAikfkiKeSctO8aHuBrTSZQe8jIU+q1viNJQSugRzP4l:KkuquikfkReS35Yy6etU5iNJhuK2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
affffb6090578c80391e63c83ea6a8b4_JaffaCakes118

Files

affffb6090578c80391e63c83ea6a8b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\casper\Desktop\Coding\New Crypters World\JAcid Crypter v2.0\Stub\Stub\obj\Release\MicrosoftUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ