f95c329ad4ec49187ed199000eb2e096_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f95c329ad4ec49187ed199000eb2e096_JaffaCakes118
Size

39KB
MD5

f95c329ad4ec49187ed199000eb2e096
SHA1

e659835c689e0d87136880ae08ff6cba6c236507
SHA256

eb435cb8aa395a686c2ec0b5da425f674e7253fbc98eca186fa2f25fff096417
SHA512

a0c0c8ae1b910d3c75ee1227d52de2a3cdd541bfab99f23e6cf28540578821b19e64f4152827af5a5415ee0901149d3b50020b393c7aed36016256354c04fca1
SSDEEP

768:gSyMYPHgpv0X0Oyrt9LYXcs7fQ/lZtsF6ThpoaH+NjhEH:g7N/gpS2R9L5s7YtZtjoaWiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f95c329ad4ec49187ed199000eb2e096_JaffaCakes118

Files

f95c329ad4ec49187ed199000eb2e096_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\New user\My Documents\Visual Studio 2008\Projects\J-Logger Public Stub\J-Logger Public Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ