e03efdb76556db1c10e315ca3b69ff56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e03efdb76556db1c10e315ca3b69ff56_JaffaCakes118
Size

85KB
MD5

e03efdb76556db1c10e315ca3b69ff56
SHA1

416a0f1bb227ef04f9f7b34916177125f1961e6c
SHA256

16227d0b20569c14a77308537cc4c92f0e618e3602f462d834ca4effebfe0637
SHA512

c8410f399d212b61e3013d941dce00da4eadf4af411b59b62839d0e18acdc674435d808c344d2bf691bb40e61d1bdd76d14f72f15fd79829bacb63857b36a913
SSDEEP

1536:hIV9eBRfILWwCP1QOON9xtcQa7qxkpyxOT2Y:uV9QJwW71QZcvtT2Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e03efdb76556db1c10e315ca3b69ff56_JaffaCakes118

Files

e03efdb76556db1c10e315ca3b69ff56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\John\Desktop\Crypter\Crypter\STub\Stub\obj\Release\WinFilepdb

Imports

mscoree

_CorExeMain

Sections

.TEXT
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ