deb5edcc33dab3aa7a0660b5db6cce47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

deb5edcc33dab3aa7a0660b5db6cce47_JaffaCakes118
Size

652KB
MD5

deb5edcc33dab3aa7a0660b5db6cce47
SHA1

43b0d324055faa9643f4e4cfc1497e45ff33e951
SHA256

5a9d24be2b07e86f15c175f47fbea2b04d72e0d4334c98d261fd9d8861d9b0f4
SHA512

bfe38489fe3ca105d6adf69e5eede306196ada4ac17b0dee0f1a4b5a4735f152458f4e7935802c5cab9c5bbae61a913ff02eb6ec54ac999401331d08df948be6
SSDEEP

12288:y+IVyMlOhhsRPhJ+7GxGkueamhI1JlDXVIOiqSChNVytWEg/SXqpq8i2uW1F:QVyhfyJrueamh8Jlh2jOVvvqGaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deb5edcc33dab3aa7a0660b5db6cce47_JaffaCakes118

Files

deb5edcc33dab3aa7a0660b5db6cce47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Jakob\Desktop\iRtehLeet Crypt+Bind Project\iRtLCryptStub\iRtLCryptStub\iRtLCryptStub\obj\Release\Update.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ