f9c822f81d60f3442b3e7c8019f10a2d_JaffaCakes118 | Triage

Sharing

General

Target

f9c822f81d60f3442b3e7c8019f10a2d_JaffaCakes118
Size

113KB
MD5

f9c822f81d60f3442b3e7c8019f10a2d
SHA1

799b1347ee61cc100c75df3e9e490c4cc5de9731
SHA256

c1519fe0ccb1620722db8fa07426fb5e4909a9d24142c1682cb88a61f7dfb098
SHA512

3882b3aaaf5cc7791f3d0f239c9e4618aa509306ba674f95ab743d05b6aa7b96a685f1eaa62b6d03893cb4928687ac5f30277f8292f004e172699540c59d2ba0
SSDEEP

768:+/8VN7OIK79Pt1Dbw4BN+55wdWA+ZrzNGt5gFvDRKdeLMRu1Df08RFmZ:+0VNmhPfA4DO5wdcHd4eARup8WFmZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c822f81d60f3442b3e7c8019f10a2d_JaffaCakes118

Files

f9c822f81d60f3442b3e7c8019f10a2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Cysto\AppData\Local\Temporary Projects\CrypterStub 3\obj\Release\CrypterStub 3.pdb

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

yC
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE