c75dc867fc2c133d14cf3d59c9fe2a27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c75dc867fc2c133d14cf3d59c9fe2a27_JaffaCakes118
Size

841KB
MD5

c75dc867fc2c133d14cf3d59c9fe2a27
SHA1

93cb0e8010a40121f8feca80ee7ec93ec9de6851
SHA256

765c827f355dd6218d0824c076ce6bed9cb533c07d4d19c4f9d791e41c1619ee
SHA512

c32d9a7f3042a2300533d44061e7b48d699c0a64a87b075f9f17b1dc58d1310d394171e3f6a2222cc9ac4acdf49e9e0cc628c606f3dfa059f4517e5c2b32bcac
SSDEEP

12288:DDhIUNhMU5UBTT61VDx7GIbrPHwG+2QysYcMgcEEMwQe:vhXPMDBv6lCIbbx+2Q/MgcEz3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c75dc867fc2c133d14cf3d59c9fe2a27_JaffaCakes118

Files

c75dc867fc2c133d14cf3d59c9fe2a27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Current Crypters\2012\service\service\obj\x86\Release\service.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 802KB - Virtual size: 802KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ