14a652fb6b431b0522f9f6e3782b7fde_JaffaCakes118 | Triage

Sharing

General

Target

14a652fb6b431b0522f9f6e3782b7fde_JaffaCakes118
Size

211KB
MD5

14a652fb6b431b0522f9f6e3782b7fde
SHA1

7171f0f19d1aef1687e76390eede50286bf1a334
SHA256

0191c392deb4ac9236b40d1fbe59a502d8b13a362fb6d5b6a9c327d821057fed
SHA512

0bfca822c17f65cebfe24da203f67aa4a2ff52f0dc29cebccbfe26fe4900e6a1cec10c9823c62ed97acfec3289b6b0a8ac5e76b530e7ec7e363ef8df22dbf18a
SSDEEP

3072:X9dCaUqc1SusjUeKiSGRK/7SEjVhM5TC5avOnbnwmh0:Xcz1+9CZVhciF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a652fb6b431b0522f9f6e3782b7fde_JaffaCakes118

Files

14a652fb6b431b0522f9f6e3782b7fde_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Indian\Desktop\fucker\Junk Codes\New Stub\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ