0470558a435ba9a0099356b13f76f253_JaffaCakes118 | Triage

Sharing

General

Target

0470558a435ba9a0099356b13f76f253_JaffaCakes118
Size

396KB
MD5

0470558a435ba9a0099356b13f76f253
SHA1

8ca0b57779501a5eaecdbfc92b00829725ebe4e9
SHA256

05d77abefc0b872c35648255d17d12e35a391b336fb3c22c0517adaf9c5afc07
SHA512

9df09a5c8bab9163c427d3424fa912b1f4967642ad9f76c8f1c309d83b447fe07d24c77dc2d32d681b9d2b80beb2fd5fe1898f8fdfbae964b4adf50228a8118a
SSDEEP

6144:he1iRFc2Au93ZUcwkzJ3wwv5wagGalg8/xFkJsS6r572gCCDmLYzu/VT9kstq:hEiLBhZUcbF3T5w7GaOYAsS6o+DoYC7g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0470558a435ba9a0099356b13f76f253_JaffaCakes118

Files

0470558a435ba9a0099356b13f76f253_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Cysto\AppData\Local\Temporary Projects\CrypterStub 3\obj\Release\CrypterStub 3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ