0b3ea037f63f80871acd61868aaa7fc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b3ea037f63f80871acd61868aaa7fc7_JaffaCakes118
Size

133KB
MD5

0b3ea037f63f80871acd61868aaa7fc7
SHA1

5ee45ebccabc2cd3bda9e091055b580f809f192c
SHA256

1759d7758624940573636526763fc0e7e10f36bfde2e86aa3536195c9e7b6c18
SHA512

9ff0071877268f32059f89f47dcb0fb861a4480da9f12e20cd07c9ac0d94e3c67caeffaeae3c1530c0bf470638f26c70e055e9928340db49ebde1f44754d2cf2
SSDEEP

3072:BhkZghN+NYNxgEReSZIrlCVKrcDLBHTLfAORUZt5:zkY4gD1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b3ea037f63f80871acd61868aaa7fc7_JaffaCakes118

Files

0b3ea037f63f80871acd61868aaa7fc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Jovan\My Documents\My Music\Nyc\StubPredator4.0boy\StubPredator4.0\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ