c250268be8a7f03b4094d06b421435eb_JaffaCakes118 | Triage

Sharing

General

Target

c250268be8a7f03b4094d06b421435eb_JaffaCakes118
Size

951KB
MD5

c250268be8a7f03b4094d06b421435eb
SHA1

dabb2ed63fabd5df5afd4b75ef66489973ecabf6
SHA256

c8503de87f8200c86863915acd9ce8b1d662c19cab9243df755f098107c71529
SHA512

2cb6cbceb048709cdb318ab5524c079268582a8de70f9baa2199e4101f90e9af8185b8f51e4e9a9b24fc442264a3d584fa4866ca76c4daff0277aa4b878851a1
SSDEEP

12288:JvVE3IIIKuvj3+JqFiISjk7o0RjCwzCQy:JPnvj3+Jqe9N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c250268be8a7f03b4094d06b421435eb_JaffaCakes118

Files

c250268be8a7f03b4094d06b421435eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\lol\Desktop\Crypter\Crypted files\darkcomet\f1l3n4m3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ