193d2bd543bc69e7fcdca4b51d40cfe4_JaffaCakes118 | Triage

Sharing

General

Target

193d2bd543bc69e7fcdca4b51d40cfe4_JaffaCakes118
Size

611KB
MD5

193d2bd543bc69e7fcdca4b51d40cfe4
SHA1

9194a3a9132351eea2b23ed9e6a85ffa55b7e3ad
SHA256

d08ebc4ce6868ac37e4499f81537c285cee48fe26e9e9a08ac78041036c97aaa
SHA512

9258d7b80349be65a24d7e5fe563dd623db1b477261a4ff7e726fc03a24c96d3c0b504cf807bbdc76f8c89810a0bb8bf2b1b921391c4c233daf7009600a1c294
SSDEEP

12288:nFMrHaFuFCFSU/RBOyd/SBsPgoZzqlIwG1DBREuw:SDaMFCYkf/MFoZyiBJw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

193d2bd543bc69e7fcdca4b51d40cfe4_JaffaCakes118

Files

193d2bd543bc69e7fcdca4b51d40cfe4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\NoAccess\Desktop\DrunkenMonkeyCrypter\iKrypter\iKrypter\Service\Service\obj\x86\Debug\Service.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ