0aa109abf582a16f7131f0b935260099_JaffaCakes118 | Triage

Sharing

General

Target

0aa109abf582a16f7131f0b935260099_JaffaCakes118
Size

18KB
MD5

0aa109abf582a16f7131f0b935260099
SHA1

6a946e34382707f82549e5408ecef24d1c05f83c
SHA256

a6fb03ba3d212222762fb6abc04d43cf0c17d2c9548054c6e38de8c9ac83ed66
SHA512

16c03a158cf9035c0488d0cf6d92989a6b262751bb2b0471887faca1fab60b8cfcca40c7406dbdee29321f404946aba51e85e06d5a26f67c82c8662ee612b40a
SSDEEP

384:UGxYPH2fo6pgkRFpePLf45sVsQfjXuhX7:UGxYPHr49peDlV47

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa109abf582a16f7131f0b935260099_JaffaCakes118

Files

0aa109abf582a16f7131f0b935260099_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\St3f\Programming\Visual Basic 2010\Easy Crypter\Easy Crypter\Easy Crypter\obj\x86\Release\Easy Crypter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ