e8b2b57068de17ca0adeaf9977455d26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8b2b57068de17ca0adeaf9977455d26_JaffaCakes118
Size

198KB
MD5

e8b2b57068de17ca0adeaf9977455d26
SHA1

7080c7f01aab1d110047163c7fce33641c93e19b
SHA256

2b293b12463d7f30147208e4466d97a203551bd1d8d35651c019d94675e16353
SHA512

334bf3136baba0bf8a679eff1c91ef61f47d02fbcdf428bdaa697ca875f7820e587f9626593c4a4ef67433e134401dc65a230897aa026c5ebc2a93c3d9f9fd12
SSDEEP

1536:qGuLYednSF3EeMM0lLwcHLlky6XntZpWjgU91fpnKTWAB0NzG/u/wb6Ubhg41lJZ:q1LYqSSeMMKLwcHLlz4H8nt1O1lJrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8b2b57068de17ca0adeaf9977455d26_JaffaCakes118

Files

e8b2b57068de17ca0adeaf9977455d26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\documents\visual studio 2010\Projects\Stub\Stub\obj\x86\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ