0d814e379875713b8a52bf08dd9eda83_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d814e379875713b8a52bf08dd9eda83_JaffaCakes118
Size

50KB
MD5

0d814e379875713b8a52bf08dd9eda83
SHA1

0506b71ec11e64f20292e979c0827717524199aa
SHA256

ac2826d46cd502940df6e73be699ef876e3bb64f186b96f6efd045434427868d
SHA512

f8a3bb86ff04e2aeb7ba4a6fc8e338228a119acc2a660721b99c6c24453bbc727ee5546f12274bd81d8811e1115e4bbb22957325a2c1cdab9ace264823be7f7b
SSDEEP

768:3rAdOg3r2uR7F8gDtoexhKJSWDLpft5RwV44NqGWx9zYcCe:3rsf3r2uRmjJfDLdaVdN8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d814e379875713b8a52bf08dd9eda83_JaffaCakes118

Files

0d814e379875713b8a52bf08dd9eda83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Hajro\Desktop\MyCrypter\MyCrypter\Backup\winini\obj\Debug\winini.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ