bc3ab55c90333f4435f6a7b5fa12fd08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc3ab55c90333f4435f6a7b5fa12fd08_JaffaCakes118
Size

268KB
MD5

bc3ab55c90333f4435f6a7b5fa12fd08
SHA1

a73afedb6f41ad07dd119e4ce9a53c9b4e3b3734
SHA256

e1fc8ec062fc3f77a1dbc5bef1b29a42b63d38c01d1710e07b9c6b186c00683e
SHA512

3039179cab9973f39fa8f6fb0f6d580a4acd382f1473f8af35671b3ecc7393800ea036c780b45cbc585c92ca97337b38afe78063ce4b15a4ad30b3e50847aec5
SSDEEP

6144:PyM1iJcYtR1HsvpSHY7KoSrfTNBuzZZcA1wnOLrMM4D:pkHcpSHY7VSrfT2/czO3Ha

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc3ab55c90333f4435f6a7b5fa12fd08_JaffaCakes118

Files

bc3ab55c90333f4435f6a7b5fa12fd08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\t0fx\dev\VBnet\MyCrypter\winini\obj\Debug\winini.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ