fead4480a0081d92d0c2b1befd5f1c2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fead4480a0081d92d0c2b1befd5f1c2f_JaffaCakes118
Size

147KB
MD5

fead4480a0081d92d0c2b1befd5f1c2f
SHA1

c254130b7529617181524aa58b96d6c8b959a420
SHA256

a67e2fa53f575ff5976f7f504423d41d2a3149300c0707579acc2014e0403574
SHA512

44c6f6c2abdd390886b54ae26f8565745823d0c8dc8ee24ce1120293ed57d467f5552797e0585a368d1b9aedeebe980c870d14b2c61757357cad620fe70d07f7
SSDEEP

3072:+UI7aDMhGw1msz5mxP6iHwGEwUnNUjH2iVofPrwGBt0:+OA31msEJsGEVnYIzZB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fead4480a0081d92d0c2b1befd5f1c2f_JaffaCakes118

Files

fead4480a0081d92d0c2b1befd5f1c2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Simon\Desktop\Simon Crypter Stub\Simon Crypter Stub\obj\x86\Release\DPCS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ