d17dc08565ca4db7f10bb55f4c4df6b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d17dc08565ca4db7f10bb55f4c4df6b6_JaffaCakes118
Size

63KB
MD5

d17dc08565ca4db7f10bb55f4c4df6b6
SHA1

1a2aacfcbf6a7f9090a98cf075a8f2f41a7bc3d3
SHA256

ac00c18392563c60584473c78e905406065858e2f9cdb9a350c319837a2591a1
SHA512

dde6f7924b26ebf6000b358b1a075212409381b4e82cd5c4592bc7e365393c7912106ac277c96e2a091034d6a209707d6e817e8ba33d781c7640e5ecde1f4804
SSDEEP

768:nPr8h/okPctu4xQzYcCebwBgu7+bC/VxPwpHxT8xwpbb4vGbRnLjEV6mBH:Zyct3ikB+b/xxlpeK9O6mBH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d17dc08565ca4db7f10bb55f4c4df6b6_JaffaCakes118

Files

d17dc08565ca4db7f10bb55f4c4df6b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\t0fx\dev\VBnet\MyCrypter\winini\obj\Debug\winini.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ