f6e285b0f8915f43f808482273fa9189_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6e285b0f8915f43f808482273fa9189_JaffaCakes118
Size

1.0MB
MD5

f6e285b0f8915f43f808482273fa9189
SHA1

a922e102f198950d8e4def8f9be311a738dd09f4
SHA256

f0d8c015a4358c382e87f22872d6aeaebd4831988980705c4f43e46991eff952
SHA512

524c4ed75980205ab41428ef2eae6171f7213870da4e068a5f8e0bee6d7471489c46209cf04e12f9abd558a008fbb817eb5bb4beb9746e4d17c799742a2625ee
SSDEEP

12288:h9Jho1sZkO8UTH9Jho1sZkO8UTFkdD/s15PvfoQTYIvZ5BKkebBcRraj:3K8KZdD/IpAQT/AkebBUraj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6e285b0f8915f43f808482273fa9189_JaffaCakes118

Files

f6e285b0f8915f43f808482273fa9189_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\TRSK\Documents\Visual Studio 2008\Projects\Crypt\Crypt\obj\Release\Crypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 405KB - Virtual size: 405KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ