bc4ec88170e1d0aef51b4f578c1f0074_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc4ec88170e1d0aef51b4f578c1f0074_JaffaCakes118
Size

55KB
MD5

bc4ec88170e1d0aef51b4f578c1f0074
SHA1

bee5ecc477a7c3a6120b6949a283514fcf5faff3
SHA256

bf50001c835c46a141be71c61adad0cb50b271a1c1125a7521f8dfb1bf33ed3b
SHA512

9bf65358219fbf827704b69fd09e15ff0e78eddb3b3d105ef439e65413034420b229b0b2da081dd52ec2703e48c7b041a60a7883d10e7d74fb7ce07c2411d2c2
SSDEEP

768:r4FHpG/avAyiwGAkm6U77wIEx326IW2XraLBEXPp5tPD99iM:UFH2avHfgdU7lsOraLmLxj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc4ec88170e1d0aef51b4f578c1f0074_JaffaCakes118

Files

bc4ec88170e1d0aef51b4f578c1f0074_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Bastien\Desktop\Bureau\Programme\Crypteur\Stub\obj\x86\Release\1h2fg54gf1gf54g14d5d54g.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ