0d38c84003190a15d1c0bebd534fcb58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d38c84003190a15d1c0bebd534fcb58_JaffaCakes118
Size

119KB
MD5

0d38c84003190a15d1c0bebd534fcb58
SHA1

bd83e5857ff5c211c77e2f9e5ae4722b18ff59b3
SHA256

1dc83dde82b6340b680313ecd82020060b77e28bcd1644440227e906d7222bd3
SHA512

8b6b6ab917f07054da5f112741662e4816ef0422efce257511e472b9a7d8e6980966451e2128f85fb8bc7d567467a7595d55ce86134c48a07069d57d242f13d8
SSDEEP

3072:XbSF9Ow7XsFPhLv4C35skt0Sz1HKkXvrf7IHvuxRkMYyu2WN:rts8bvR3GkmqHK8XIHvORknyuX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d38c84003190a15d1c0bebd534fcb58_JaffaCakes118

Files

0d38c84003190a15d1c0bebd534fcb58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\maxim\Desktop\Source\nathan_stub_fud\nathan_stub_fud\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ