07bb1c89b921b104d96002b8ef42c8d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07bb1c89b921b104d96002b8ef42c8d6_JaffaCakes118
Size

349KB
MD5

07bb1c89b921b104d96002b8ef42c8d6
SHA1

cf449b10052c81ffca4c916ff947283b761c32ae
SHA256

b75bb7ad9942539071e7f4123ad54eb13fc29eba801c214c2181d192ed887c1b
SHA512

e376d6d18cbe30af5c0a4e671265281df256c9200646392d6a9f0bee18a429e9904292633fff2867b722736a0f4f103e75f234947c5e45eedb7373e1f315f11b
SSDEEP

6144:xfNu9gA5pOF0iOKT+30+WK18Bd2/Ywwnljwyf:xs5wF0btnWK18S/Ywwn2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07bb1c89b921b104d96002b8ef42c8d6_JaffaCakes118

Files

07bb1c89b921b104d96002b8ef42c8d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Deadman\Documents\Visual Studio 2008\Projects\Stub\Stub\obj\Debug\Stub.pdb

Sections

.text
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newimp
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE