26dba8ef9208c5297bcc56c6135ebb94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26dba8ef9208c5297bcc56c6135ebb94_JaffaCakes118
Size

56KB
MD5

26dba8ef9208c5297bcc56c6135ebb94
SHA1

1d185cb8f601a63535b7a26707ac9dfb46b3c2e3
SHA256

9c0f937edda4d586f03fde0d3270ac74f54265e7cf27012c4520837866f56ac8
SHA512

313688eb17719e34b8f6c2267d27d444d19c8801d0a7c8b9e7945bf779f30336ab052f59363a614db2982c5502a78f071016e3a7dded80cf5810e102f413cce9
SSDEEP

768:YnDxyJlXcFTQmD5ZMBx84ycyxzBNuf5/A7f3QzrN87gm1M+5gXEZAbcZfjCI+V0i:oVyJOTHVyHk9z+hwlVlg4AAlb/P2eY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26dba8ef9208c5297bcc56c6135ebb94_JaffaCakes118

Files

26dba8ef9208c5297bcc56c6135ebb94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\auchan\Desktop\Crypter\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ