dc2a19b9a3948848851d3e9640adaef5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc2a19b9a3948848851d3e9640adaef5_JaffaCakes118
Size

275KB
MD5

dc2a19b9a3948848851d3e9640adaef5
SHA1

fc9c79172cf078c3173d45a5e8d12dee0a2c9900
SHA256

2e00d1ff2f400a642f3fe746952b9ccd9d07f99d449b1e4f71e9c0f45cb21160
SHA512

5923b2afc5551ab24e3ce9cd42158f004f0ed415b541f4e1d6cb49555f9645e7bed237aca49a49174c5b1645b9d560291ae0ac5349ef0fd1b33b72df0a602d03
SSDEEP

6144:WsUUimu2rF+As4iHum6N6hPvgUEKjrC2/ABsPXS7zfcFgQEW+k5UD:WsUUu2rqFghuC2pXSHfwPZ+k5UD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc2a19b9a3948848851d3e9640adaef5_JaffaCakes118

Files

dc2a19b9a3948848851d3e9640adaef5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Slichice\Hakovanje\[2010] Hakovanje\DeskTop\VB.net\Projects\CR-Crypter\CR.Stub\obj\x86\Release\CR.Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ