JaffaCakes118_1a669cd4cd5a411751ea402f18f5cd74 | Triage

Sharing

General

Target

JaffaCakes118_1a669cd4cd5a411751ea402f18f5cd74
Size

126KB
MD5

1a669cd4cd5a411751ea402f18f5cd74
SHA1

e25b5bfc127147425a04a1fc553d12a1235814f6
SHA256

db98339871559b86da0d442803cc11f1a8e7514fe0008ad85a354fe97e977f46
SHA512

26f87e1815a824f589f1d4f4adf6f6fb417e68e8b03c4c8725ff3fff3a21ee357dbbed76a10d5bb59ad7304b4ed124f0c1f62bf704e5bf0072989933f550a0c2
SSDEEP

768:dQI4VAn8vS/r1w6A2j5CGXRFxlz+44duYW0238mB1o6GBDwGsL+8r5Li99Vq7fBN:aax/r1V/5fPW4mud02MTrl8lO9C7p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1a669cd4cd5a411751ea402f18f5cd74

Files

JaffaCakes118_1a669cd4cd5a411751ea402f18f5cd74
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\1XMR\LimeRAT.v0.1.9.1\LimeRAT v0.9.1\New folder (2)\NetFramework.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ