fe2839fcb1ca0adf3bbbec07044ec331_JaffaCakes118 | Triage

Sharing

General

Target

fe2839fcb1ca0adf3bbbec07044ec331_JaffaCakes118
Size

3.5MB
MD5

fe2839fcb1ca0adf3bbbec07044ec331
SHA1

d1dcf540c3442a896c7bcd0f043335a4a5420aa8
SHA256

4ea1f1943463478a52f13a7e26aca6698996032b45b1fe2645ef053f35a7aae0
SHA512

f6573208f1072aa45aa9cd9f04d6237dbbacc3d86918d75d68398b284a7b041d70153cb5fa8886025ad3707f3b96c1d904099a0d27e6d5bee10054930484be29
SSDEEP

49152:8UqJR7WaUW+yKsFd6txXu9NLFnv3Nzv/yNv/l0:lk3KsFd6txXu9pyj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe2839fcb1ca0adf3bbbec07044ec331_JaffaCakes118

Files

fe2839fcb1ca0adf3bbbec07044ec331_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\PC\Desktop\stub\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ