110bdec3d484d9c7859f86c7b91872a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

110bdec3d484d9c7859f86c7b91872a4_JaffaCakes118
Size

967KB
MD5

110bdec3d484d9c7859f86c7b91872a4
SHA1

095a295cc92fa8814d6c5c7615dd7ea811c5dea4
SHA256

01c963b20dc13ba2c5de2b1933724a12c54eafdec51a1a040332877d535bec9c
SHA512

a4c429f9e34ef45d0e4c75a478f3c9a706407a9ce7058ee5a64b72bc303fe1b67113375a476ae1d34c6009907178b4c48cf1ebc60cca01c06fc37b9d891c1161
SSDEEP

12288:GmxeLmwf+6nUxvZQAeaKOAvJDZtGsyISuU8XO1cBhoCjLAvB0rmbKQ0J2yhbeM:GmKbxRf5UsyBuU8e1cUCjLAvB08KrtqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
110bdec3d484d9c7859f86c7b91872a4_JaffaCakes118

Files

110bdec3d484d9c7859f86c7b91872a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Cysto\AppData\Local\Temporary Projects\CrypterStub 3\obj\Release\CrypterStub 3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ