df59496ce9d9eba8bfc447c066650a04_JaffaCakes118 | Triage

Sharing

General

Target

df59496ce9d9eba8bfc447c066650a04_JaffaCakes118
Size

737KB
MD5

df59496ce9d9eba8bfc447c066650a04
SHA1

845003070ae7d41c5770dc7805f9d880ed525f56
SHA256

c6fda4c45f1df9cbcc6054256dbe73fd89a332fc8ff8552347c46a6dc364da97
SHA512

eb39eefadcdb7856c4bd44cc9079c1d84093e4fc6fb3ef94a7438d24b5d3b7eaba6c5b6a8a2c81ca3ea79493e3809d611b76add347b72447935040ddbecf066b
SSDEEP

12288:sJmHQJV+Q9zFIs9i3s7Q6jcIaVCc+ZfSpCzrxXUd42/RhSGnfMPxvCVEwVZCJg:sJm+zOsg3snE4c+ZfSp0rxXO42pAcK5e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df59496ce9d9eba8bfc447c066650a04_JaffaCakes118

Files

df59496ce9d9eba8bfc447c066650a04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Bryan\Desktop\Crypter\CorruptD\Stub\obj\Debug\Winfile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ