52f3b98c5b4a05e329fd7fd857b241b2_JaffaCakes118 | Triage

Sharing

General

Target

52f3b98c5b4a05e329fd7fd857b241b2_JaffaCakes118
Size

407KB
MD5

52f3b98c5b4a05e329fd7fd857b241b2
SHA1

965d9d6b800e6acb4e1c6a87622db781d710725b
SHA256

748e517c73b7afabf0db77683d0d6280abd843f36eaa86c8b0d83f6963e3abef
SHA512

bfba53832c10b6632e439d0f717c812e5e66fd2b7fd8cbdfd06e7fb0dd17ea3b8020906a6bde2881eda5b1e6aed3c696202ae51922872a43276b898e6dee1a86
SSDEEP

6144:pOh5V911Z8DJtApfDf/eGtqTsGz1RfLsXXkFC8SjmYfkD0UYBji1hap3D53hZ:pOh5/138Dcfb2FzPwHkFy1kXukEp3DB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
52f3b98c5b4a05e329fd7fd857b241b2_JaffaCakes118

Files

52f3b98c5b4a05e329fd7fd857b241b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Muhammad Mudassar\Desktop\Nathan72389's vb.net source pack\ScanTime Crypter\1 scantime crypter stub\1 scantime crypter stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 223B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ