bc5a2c3d38352e73cc1c53ab89e9a769_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc5a2c3d38352e73cc1c53ab89e9a769_JaffaCakes118
Size

456KB
MD5

bc5a2c3d38352e73cc1c53ab89e9a769
SHA1

593becb2beb6c777c3c5968edcd6a985f10ce886
SHA256

9ae11af63327376b6f9824e31bcd4c6a1c55e9161dd9a37ea968ba585d1afcfa
SHA512

533f71ac907694b49e28178230dc6a29bd2c7e00359dd28176390e55d6bb7b5f473dab0135611d3fd7b515993a53b561acb17fce6ee74f4bef7be719e79fc939
SSDEEP

12288:eyuI+xbCBsq1z7IAKFv3yTgzqAjwFb0iiL+bgdn2:eyu7FAlTgz7Ggdn2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc5a2c3d38352e73cc1c53ab89e9a769_JaffaCakes118

Files

bc5a2c3d38352e73cc1c53ab89e9a769_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\G73SW\Desktop\crypted.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 87B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ