cf14a2fcdcaf0967e3985904461a6df6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf14a2fcdcaf0967e3985904461a6df6_JaffaCakes118
Size

902KB
MD5

cf14a2fcdcaf0967e3985904461a6df6
SHA1

26c02bc2745386e6e196a74c0a05b8f529945f35
SHA256

52183d57797ee766c23364c9b66241a110842ba7f4f79e0d335cbb3474dd2257
SHA512

dae4ab65076ec97634e066c9bb44fb80a89811f4d236c0dd8652ca551bd915e08e3640b59a6e2507635f15d198c398746d83242a7508ac60d65e1957459f166d
SSDEEP

24576:qGETDN6pk2ujd127rXQaxuOmhozUEesWQL:zSdcAh9SWQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf14a2fcdcaf0967e3985904461a6df6_JaffaCakes118

Files

cf14a2fcdcaf0967e3985904461a6df6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Desktop\Simplicity Crypter\Simplicity Crypter\Service\Service\obj\x86\Release\stub912.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ