0f14e0c86b2811d90f2d7467d1911f59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f14e0c86b2811d90f2d7467d1911f59_JaffaCakes118
Size

88KB
MD5

0f14e0c86b2811d90f2d7467d1911f59
SHA1

a3417c9c98ed3d0c03909580c1dfe206cb6a5049
SHA256

a237a0d6fe281beb5dbad56bcbfd049b935f7b3f12fd018198c269cd42464486
SHA512

d07bd5fe82f523af9a20f1611b7434245eb5366082c6031ea854c2827c74f53ef1eff6d0af5e8d574261783228a77f49d4ad8f64141bda1a6f4b357a1f1b7d5a
SSDEEP

1536:bvMPni6SXQD2QPoGCHINebwH46uMEUa3jCYG36CiNG5TAxUK189TZ6T3HDX/vqO4:bqi6SXQHnCwdiUamWhTc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f14e0c86b2811d90f2d7467d1911f59_JaffaCakes118

Files

0f14e0c86b2811d90f2d7467d1911f59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Documents and Settings\Spider\My Documents\Downloads\Crypter\Dick Crypter\dependency\obj\Release\Cursor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ