06ec491b40870fa3e217074076ad3ca1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06ec491b40870fa3e217074076ad3ca1_JaffaCakes118
Size

757KB
MD5

06ec491b40870fa3e217074076ad3ca1
SHA1

4e4fd2c8197eb3034282fe88e5ec26ed7713d1b9
SHA256

d8467be2128ed30bac6cb1dfc23735c4e509e2970e83ba3b518dcba4edc07a0e
SHA512

f0e8d9c57bbc905da3cf7c516332566920efda23c6d1b3b5451a410f54cb2d6aee3aab1453dace441a86d4bb8fc0e224b485998994ca4b6cb7fa12c395a9d3e8
SSDEEP

12288:Fgiy8tylyb5/NN1158hYOLWK1PaDlmtwqudxM4LXDmsfzfIM8DOzRbWWz:F1VyuNN116hYODRaDst6nLTTfIM8DOtz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ec491b40870fa3e217074076ad3ca1_JaffaCakes118

Files

06ec491b40870fa3e217074076ad3ca1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\user\Desktop\HF-TinyCrypt\Stub\Stub\obj\Release\keygen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 739KB - Virtual size: 738KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ