d709c5f5078ea6dfc038f1ac0e060f64_JaffaCakes118 | Triage

Sharing

General

Target

d709c5f5078ea6dfc038f1ac0e060f64_JaffaCakes118
Size

390KB
MD5

d709c5f5078ea6dfc038f1ac0e060f64
SHA1

43254506855f1d92a2160725b9ca60afd32d98a6
SHA256

1b2e9db8dab9a918cb67ce0492dc58a221e59f67db2e68b19bb90655af5a1514
SHA512

c4e3442a227e5e1bcc9fd378d9bcf753dcf156b3593fccd9cad4e76fcb506ec35c0f2574b8a9c7e40573bb15564de2047bff773669e25d7319913451796c92b2
SSDEEP

6144:a4Igs8cRqh1XpXoq8+ZJw4/gsP40nZY3fWrVECB:mg3hrXpX3TZJD4uZ8fWrmCB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d709c5f5078ea6dfc038f1ac0e060f64_JaffaCakes118

Files

d709c5f5078ea6dfc038f1ac0e060f64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\CrypterProject\Ultimate Crypters Guide\Crypter sources\Sk1d\Stub\crypt sub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ