ea5f5b80f321bb88c658040972755c72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5f5b80f321bb88c658040972755c72_JaffaCakes118
Size

233KB
MD5

ea5f5b80f321bb88c658040972755c72
SHA1

eb5c113209bbbc81bfb3e3347ad395d927bcf531
SHA256

8c017aebd2c2a178d1e25777dd58274e6bc03975b75eb43ce010b0b005754f64
SHA512

274029bf9063bb42a4408fbf235ab3e8595a2c16407c8a93ba6750de22904931642f38c34a88067021fd45331df7dbcb23da70830c8536c8d6a582e2364ad444
SSDEEP

6144:kyRbsR0Q6GiiiGn9G5iiin55Yiiodd5nxiP55in554fiiYindGin5n5aJ7/6Hn45:NRu0Q6GiiiGn9G5iiin55Yiiodd5nxiK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea5f5b80f321bb88c658040972755c72_JaffaCakes118

Files

ea5f5b80f321bb88c658040972755c72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kdglkrkjdfhslej\Documents\Visual Studio 2010\Projects\OldN0$Crypter\PRI\PRI\bin\Release\BabelOut\Dog.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ