186965f30c7b19408c9fb8caf3896b95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

186965f30c7b19408c9fb8caf3896b95_JaffaCakes118
Size

135KB
MD5

186965f30c7b19408c9fb8caf3896b95
SHA1

907551cc84483bb3cc8e1856ab036a61ade3f26b
SHA256

2a1cfd08f58de7547f546938ec868350c21b114887ef54050a94afb963fe9526
SHA512

765abd70ad207846f1e9a916e9755ff07406b206c7f61b55eae077b5454b3e189e8fee6946a2d77ecce1a304d13239ad513a91545038801d4c1adb5eaef7049d
SSDEEP

3072:un69KmMIZ2baRYX2NCancRu7AlSfZEPCNIj2BMuHIxCLsVUhq3Q1+Lk5zGdYfSpV:Emy/zmTCr7pfxlL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
186965f30c7b19408c9fb8caf3896b95_JaffaCakes118

Files

186965f30c7b19408c9fb8caf3896b95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\admin\source\repos\stub\stub\obj\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ