f6feae8ff33b6f2d5df6ce722e820298_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6feae8ff33b6f2d5df6ce722e820298_JaffaCakes118
Size

96KB
MD5

f6feae8ff33b6f2d5df6ce722e820298
SHA1

3f5e7d862603886d77e2434d4a7d5c883a37ac89
SHA256

5c289439b7ca16d4049882e6bf7bdbb41e32f8f3d519e24e6288bfe31dc6677f
SHA512

59674c8430545997873783a86c0b9929fe12492f07ea659ec31222021b728cd4b1e999fb58a54d05e761f22a1e8afc57790a1c7e44d901cd809843d7e058ff09
SSDEEP

1536:5An0oppM4wDXMGpPK+F64q9Xaqsw33S3ycaN2F1s+Hg51xMQyGVP:S1ppM48XMGg+Y9qqn3GPHg58QLl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6feae8ff33b6f2d5df6ce722e820298_JaffaCakes118

Files

f6feae8ff33b6f2d5df6ce722e820298_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\dr zinou\Desktop\Stub WinZino\WinZino\WinZino\obj\Release\system32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ