f5a081ab1e0689a3a05b396b503292d6_JaffaCakes118 | Triage

Sharing

General

Target

f5a081ab1e0689a3a05b396b503292d6_JaffaCakes118
Size

392KB
MD5

f5a081ab1e0689a3a05b396b503292d6
SHA1

0b15b9df7b42ce71a5de1f2888fb91bca31091dd
SHA256

956ef56b952a7a88ba339fa4d8e2a1a855c772e89c9b17b64213a5aae552d523
SHA512

b3527be2fe6aedb3480824d1b5dc8156a396ee5d6310d021d21cd73cee76b8e0edda5259eb6789b866ca609e6a2f54407cd56ba5a8b2fabeec926176a6216327
SSDEEP

6144:dZ4mEt6IZDpOhdcAlF9kXjI4KBo8nEHpuh/H:HqjAlF9kXjI4KBo8nEHpuhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5a081ab1e0689a3a05b396b503292d6_JaffaCakes118

Files

f5a081ab1e0689a3a05b396b503292d6_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\stennis1\Desktop\sturen\saddam\WindowsApplication3\obj\x86\Debug\Saddam`s Crypter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ