bad369ecadf8b031fdf6f7c0f2433708_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bad369ecadf8b031fdf6f7c0f2433708_JaffaCakes118
Size

299KB
MD5

bad369ecadf8b031fdf6f7c0f2433708
SHA1

f4fb42ed3528a253455cbb80006451d86f594451
SHA256

71bf74c6a4c3021d3b8600a0394839cee147b4327a031ad53d1603e83615039e
SHA512

7492d637ec62793a73890eec4c0e08fd2dcc9bf16b9c78e5242d2abf587894be4b6830bf58bc1caecefd979a85c31805a21e14003ada838e463c3bf8b29b3466
SSDEEP

6144:LemCDN+B0Fod9qCFD/gFGtgipUFRQMh5zr2kUgIf:LPaAB0FcnxpU8uzrJJM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bad369ecadf8b031fdf6f7c0f2433708_JaffaCakes118

Files

bad369ecadf8b031fdf6f7c0f2433708_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Surse\NEW N0$crypter\NoAdmin\wmpnetvk\wmpnetvk\obj\Release\wmpnetvk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ