150c5355801fddf4262b10baef3fbb8d_JaffaCakes118 | Triage

Sharing

General

Target

150c5355801fddf4262b10baef3fbb8d_JaffaCakes118
Size

303KB
MD5

150c5355801fddf4262b10baef3fbb8d
SHA1

49c2a2cf3cb0823097e99224218ac9d1b7f4a15d
SHA256

e899756abf64c1133371e312790ea1a52bc192869df951cf6a4d4b1ebc616f03
SHA512

7600a7f15ac578402d7a3a8a1bec644d2565bcac771520791881bf8ed0d59b982f884e32d25cb60c08987188fd241609eff81800c5a3d9d5709c84de78070a79
SSDEEP

6144:O7qx8qur4mtz9YmutK8dsnDCoE49CDXTAM/vvW8:N8jDtemJ/nO/Bx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
150c5355801fddf4262b10baef3fbb8d_JaffaCakes118

Files

150c5355801fddf4262b10baef3fbb8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Admin\Desktop\MoonCrypt\MoonCrypt\winini\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ