b0df69c8413d111218cf381786409c67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0df69c8413d111218cf381786409c67_JaffaCakes118
Size

172KB
MD5

b0df69c8413d111218cf381786409c67
SHA1

332f052139ce9de52c2452cd64dcd0ea8c73cc47
SHA256

1b496692dde62ada65c7fc5b3c77f3612e3f7618a573576b5f8b4b2321c375ff
SHA512

80747a2f1596dce2d3297c352e0819de0a7fdaa1b6a468b86e609c0b7d2b5532a7f6848671a1526c74beb581dd0ada62cdd8af3bf63cdd5dad0ea9b84e734d88
SSDEEP

3072:rGBPHk/EmSxVgDSNksOi9W+x/rm/JBfPh4A90Oy0NjnGF7xAIBB:4M/f8e4xnzmBVD0XXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0df69c8413d111218cf381786409c67_JaffaCakes118

Files

b0df69c8413d111218cf381786409c67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Adrian\Desktop\NEW N0$crypter\NoAdmin\wmpnetvk\wmpnetvk\obj\Release\wmpnetvk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ