bd36b4262da892d06b430d48efddc8a2_JaffaCakes118 | Triage

Sharing

General

Target

bd36b4262da892d06b430d48efddc8a2_JaffaCakes118
Size

23KB
MD5

bd36b4262da892d06b430d48efddc8a2
SHA1

d90ef2624a9ec811b095b167cad3aa271a53e250
SHA256

2a07700a609dad77e00c1f15a4616de7068ca3330c57cef2db3e2ab7f5a570c1
SHA512

a51b626f03e4c48637d4ba881f7ba26bc4e9399c2eccb442fe6626895e0fb26e90f96fd03e7c84c3403037dc9a8defedba484bad8bd7b181d44998b6cbf39d3f
SSDEEP

384:M3OXJfWchviKbb2rvxLf45LQfrsLruM1aXM0/YOeOs2+I98nJr8pnwDgTb:M3SfWkLbbel0aM0gOeOsHIuJrKnwDgn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd36b4262da892d06b430d48efddc8a2_JaffaCakes118

Files

bd36b4262da892d06b430d48efddc8a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\downloads\Nathan72389_s_vb.net_source_pack\Nathan72389's vb.net source pack\ScanTime Crypter\1 scantime crypter stub\1 scantime crypter stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s
Size: 512B - Virtual size: 217B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ