19581125ac1b77043dff082e2a887375_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19581125ac1b77043dff082e2a887375_JaffaCakes118
Size

318KB
MD5

19581125ac1b77043dff082e2a887375
SHA1

dc732758166363c1c0f574831a87e3b05bd8a9bf
SHA256

6f6d5ed9dc9f61d3306f8cb878b093f972c658bbb65fb84f9b840ee50ee2dd3a
SHA512

9d063fc722a6f82358bebafc08f61e5c6847385c86c09b82f9a9b56d239ad0176723af90322f241da7132cf95d9b84e1ce79c9a19987ba2179df2d066f0d3c84
SSDEEP

3072:UFWEYwww+r2mJtEy0jd/1jF+OCfzYEeRV6YMJiTdc7++K340WtCUv8pRFRdMCW0s:thwwLDJtEhZ1VmYGiTde+Mpv8qaJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19581125ac1b77043dff082e2a887375_JaffaCakes118

Files

19581125ac1b77043dff082e2a887375_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\AppData\Local\Temporary Projects\WindowsApplication1\obj\x86\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ