dd989283a55402934892db10cf760b85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd989283a55402934892db10cf760b85_JaffaCakes118
Size

28KB
MD5

dd989283a55402934892db10cf760b85
SHA1

0ea556f969a8f0cd0e9a04db880d6e293bb32b52
SHA256

4be71cd70aaed01301e94c4fdab0f7fda476e222a48f66cdce8f1c49c2261571
SHA512

62b15eeee7b4535097482939d37ac5cd8abbbb987174654b7fad2ce27aaaa993baa6ac123ca47bf26063b606333b641e6b665f5d5f97bdc8fb7162a5f33800b0
SSDEEP

384:p9asJARlFpCzXbj6iZGUFQCqdxLk241n1qQl3XRGBKpuRofTCzYcCe:p91AzFpCzP6irFQXPoHtfGzYcCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd989283a55402934892db10cf760b85_JaffaCakes118

Files

dd989283a55402934892db10cf760b85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\GULMUS\Desktop\ANTİ NORTON\Vampire Cryptor\MyCrypter\Backup\winini\obj\Debug\winini.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ