f635706f0815dfb88516e2738ac7818d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f635706f0815dfb88516e2738ac7818d_JaffaCakes118
Size

1.5MB
MD5

f635706f0815dfb88516e2738ac7818d
SHA1

8af419bd7cbba086c06c061e2841130f3a29e083
SHA256

a17e66ef69a2cf237de64655f86fb724a5c2999d691ab18ca6a54355f90ea122
SHA512

e08c45833af1e2c839a83910fce49ed21cad2dd849a05403eb209173fa8a0a982032fdad0fdb82692e6d713b43c61d4979028337c9b243ac0cc2aa8e60b07084
SSDEEP

24576:6RLSNKncfh3IMsHpN/mmoRka3OwBTEB0jH9EruODvRSLtVjp2ZK+bVxjm:6iYhpN/mDk4OAYWH9ErJMVt2Q+bVxjm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f635706f0815dfb88516e2738ac7818d_JaffaCakes118

Files

f635706f0815dfb88516e2738ac7818d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\nathu\Desktop\Sickrypter Mini Version 3.0\Sickrypter v3 Unique Stub Generator\stubgen\stubgen\obj\Release\stubgen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ