0f01441b05587bb95cfbac7cbd6a5f0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f01441b05587bb95cfbac7cbd6a5f0b_JaffaCakes118
Size

454KB
MD5

0f01441b05587bb95cfbac7cbd6a5f0b
SHA1

94eada9ef762375f8c170d3d2fbd52c5d0fa1847
SHA256

b86aaa7500a4ad6494b6675d6c3d1eda18d68df3ea2cdcf9de267fe7bd30186b
SHA512

2046d7f1c0e7fce860248e23f53a65a250ff6b270475ad6ed14026338daa28f48bb73a6a0289f8a552cbcd2f75f4baf4a3717afb4ea6f300e4b8f9aeb681260a
SSDEEP

3072:hK6UrRigbSbJKK5N0HC2HJ/SzhrkSl6SBaXPPs2uoFsHk2b1WZygVPVYs2BFiEkr:96oJTlrQEuBlHYnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f01441b05587bb95cfbac7cbd6a5f0b_JaffaCakes118

Files

0f01441b05587bb95cfbac7cbd6a5f0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Louiss\Desktop\LogStub\LogStub\obj\Release\LogStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 133B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ