b486f108f33265cb8ae91646915cba0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b486f108f33265cb8ae91646915cba0d_JaffaCakes118
Size

1003KB
MD5

b486f108f33265cb8ae91646915cba0d
SHA1

d2dfe6779943ca324a877bf8d3b5974382a1185c
SHA256

1c035f8623d48b3cc366b2a4fb15dd3960a6c48e1d10d3572056aa8ece602067
SHA512

0de272319f6b863badd5bf01be104d7c98b9c662ddb273a0e6f5dd306cb115598ea05640c305b5fd62915cbbe455ab992058038a5f73ca6f854af077ccb4b9cb
SSDEEP

12288:gJxPr3uY3gB/mKZ4cu4SCxFzcZtY7tDdFgoXadiCr/6HBtNkcuu6l+52J8VPqgzF:hY3gFZu4LxrtFqDCHBoPOPB0KNxMRO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b486f108f33265cb8ae91646915cba0d_JaffaCakes118

Files

b486f108f33265cb8ae91646915cba0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Hacking Sources\Crypters\iKrypter\Service\Service\Service\obj\x86\Release\Avast Antivirus!.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ