45675e411704869e95189f8a1ba30b79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45675e411704869e95189f8a1ba30b79_JaffaCakes118
Size

113KB
MD5

45675e411704869e95189f8a1ba30b79
SHA1

1ef2eb07dc27b88110904c6356bf009688cda963
SHA256

7015e450d475bbc8942e6053ef402f265c7ac017be493c922ee57ca3f1babc64
SHA512

24a28066929ea92bacd036cd7ca110512f4f68f1d2bd59d6fa5345022b77cd5877fd470bd10652a360db32c3f57732a2f1b7d6d869fd2fc611332ddc62c5ab37
SSDEEP

1536:fhM8cZgfwFet8jwdFIhC4+jk7+9alV/RQHjQqJ4Zhxbv+ORGDLJ9vZS1aUvDT8DK:fh060eijcFISjs+9alrqJ0v+WGDjH07

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45675e411704869e95189f8a1ba30b79_JaffaCakes118

Files

45675e411704869e95189f8a1ba30b79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\irishboy\Desktop\Version 1.5 Final\FowlCrypter\FowlCrypter\Stub\stub\stub\obj\Release\business.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ