54ba8ddcadb2e41c5de3e7e71f6e1f93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54ba8ddcadb2e41c5de3e7e71f6e1f93_JaffaCakes118
Size

140KB
MD5

54ba8ddcadb2e41c5de3e7e71f6e1f93
SHA1

f3344eaeeaec7ffcec120bcc7209b92941cea264
SHA256

931ceaa76a0d478219625ffc03f0fc9daa25f887b08d1b11900c1cc7b8148c30
SHA512

1dd7d2ec73fd5298b150d1338c4358d0c78979010dd62a73838d3ecc1d5ebd8b27b3f67a8d8306e76136e5590bd5e36613d62fee5bd09ba75f7569d85f4c021a
SSDEEP

3072:d1LhCn6Mx9yMGUyeDHghAvKfpfsVpd/gLx/mDQ:cn6vUyeDPvKfZKb/gLUE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54ba8ddcadb2e41c5de3e7e71f6e1f93_JaffaCakes118

Files

54ba8ddcadb2e41c5de3e7e71f6e1f93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\program\ziparchive_dropbox\loader\CryptoObfuscator_Output\loader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ