ffa648ab59f6de22bda4a2ea66377a3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffa648ab59f6de22bda4a2ea66377a3d_JaffaCakes118
Size

29KB
MD5

ffa648ab59f6de22bda4a2ea66377a3d
SHA1

54ab0305bf6e633584dcfd4b4026a3ce5f2ffe3c
SHA256

06cfe2e5f6f7468897b9683b973bd6b22f0bf9dbc17f63e2ba8d815918044484
SHA512

0e71581074ae7449903674ed5ea78ce3a6156fa2cece918dca67d6991a79a1c345aaa687f577f780b427277750b90927dbc22b2b2cf7a134a992c670993b5cc2
SSDEEP

768:8tJMrbdZo3gNagHxSGqeUdUnV1nxzYcCe:YJ62GRUdUVt7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa648ab59f6de22bda4a2ea66377a3d_JaffaCakes118

Files

ffa648ab59f6de22bda4a2ea66377a3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Desktop\MyCrypter\winini\obj\Debug\Kiulu Inc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ