b370e5d8144384c730c9e2c78b74a22e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b370e5d8144384c730c9e2c78b74a22e_JaffaCakes118
Size

552KB
MD5

b370e5d8144384c730c9e2c78b74a22e
SHA1

063d410a29cc150508e9136c1c7dae9792b1aca3
SHA256

bbea8cb3a7d73981b2a40c313115e75f9544c40114624edc194b0a50348c8e5f
SHA512

603c9476aa9b7462b6f53466b84457c97f26bbfa386a43de8bb70be537366aa71aaa63a7b69718f3b920464dbae1545f475219d1d250fd82861102acb96c3421
SSDEEP

6144:2Rs8jFGJlGyqDKdo9vV61Lkkg/xbps8jFGJlGpnEmV61Lkkg/xb:uFGJls6xkHZbXFGJlq6xkHZb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b370e5d8144384c730c9e2c78b74a22e_JaffaCakes118

Files

b370e5d8144384c730c9e2c78b74a22e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Carlos\Ambiente de trabalho\W3bPr0xy Tr0j4n v.1.0 Alpha 1 SRC\W3bPrOxy Tr0j4n Cr34t0r\obj\Release\W3bPrOxy Tr0j4n Cr34t0r.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ