3e6d09f3155138d7856e431fb1ac7df0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e6d09f3155138d7856e431fb1ac7df0_JaffaCakes118
Size

133KB
MD5

3e6d09f3155138d7856e431fb1ac7df0
SHA1

25e2aac77995ea219decf5a18b8305641b67c1c7
SHA256

0e4e2e27753867be74658069439627132f7a63e55a6f1a7dca961418a125fc5f
SHA512

55854dc4b855089016f71845a61d49095362df76d400ca76d5d5ff621ecc023ad2b5f025ee34b8683da2ae6db98314c5d02f4a1f8c7a854214a8696ba0a11bb2
SSDEEP

768:nPr8h/okPctu4xQzYcCePecOaqfvH/B81jgaSNI7YpwulWtDdYdbY:Zyct3imv3HH/imbNI706pYm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e6d09f3155138d7856e431fb1ac7df0_JaffaCakes118

Files

3e6d09f3155138d7856e431fb1ac7df0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\t0fx\dev\VBnet\MyCrypter\winini\obj\Debug\winini.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ