f516ab1f1ca7a6545e1eadfa96bcb052_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f516ab1f1ca7a6545e1eadfa96bcb052_JaffaCakes118
Size

962KB
MD5

f516ab1f1ca7a6545e1eadfa96bcb052
SHA1

fcfe5554639120b5aac231f81e37015d4797dda5
SHA256

a9f6125f883f910afdfc5964780e8f3f76c30762f9fd6a4629c62e40db5ae115
SHA512

375cebdd6d418769c825a896d8aefa4c5e39bcedc616855a050a68a648a3dd5d0f7c08ea4d303ed4ae96b3bd662c74f6675f058311a2ee71a7f9ac11b5fa7bf7
SSDEEP

6144:wv+npJkgx/2GhNpCTLCEoZ4s0SZV0ufmaVyXO2aOVKHl/mkOOOOOOOOKpdy:52iN10SZVlmpXsROOOOOOOOKpd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f516ab1f1ca7a6545e1eadfa96bcb052_JaffaCakes118

Files

f516ab1f1ca7a6545e1eadfa96bcb052_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\kingspy\Desktop\Crypter CSharp v1.2\Crypter CSharp v1.2\plasma.exe_source\obj\x86\Debug\Win3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 693KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ