e29c064f44f02073cca63b5cfdbf2e4d_JaffaCakes118 | Triage

Sharing

General

Target

e29c064f44f02073cca63b5cfdbf2e4d_JaffaCakes118
Size

294KB
MD5

e29c064f44f02073cca63b5cfdbf2e4d
SHA1

f5c0977bbf644ac9cb6615839d4f2ae331543cf7
SHA256

a4243f8315aae8b33dfa58864e1ee2ead96ecd98c7079608703e1c8afaa29621
SHA512

2caa4722834fea1be910446a9d750852b5b8f391f22f2f6837a0cad568c0655aea6db980961041b36fd5d8fad7ee273843990e1a71271915063dd5a2fb0b0336
SSDEEP

3072:omZoY8gXnfCi6RTz/tz10nwDO1WGco1YZP2f0oVhzkaBi2XSEdU:EgXfChR1z11aMP5oVhzka9SEdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e29c064f44f02073cca63b5cfdbf2e4d_JaffaCakes118

Files

e29c064f44f02073cca63b5cfdbf2e4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\James\Desktop\Source Codes and Projects\xStubRC4\xStubRC4\obj\Release\xStubRC4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ