1983cb883d67f167d88ad3b35fa20001_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1983cb883d67f167d88ad3b35fa20001_JaffaCakes118
Size

98KB
MD5

1983cb883d67f167d88ad3b35fa20001
SHA1

3f03b6f62beb2cb32cf0188933ff21eb2484d15a
SHA256

f656b0df50d7c50c027538bef6800634115652be0e34d696233250f3304c0caa
SHA512

d5325afdde8824a10eaeded5ab2d58b1957c01703b3f8b6ea51d17e7038b73c6585c52f811c1cb32fa9ed6b34d6dd4b8f8737f49761252a09be354bd235f0e42
SSDEEP

1536:HAn0oppM4wDXMGpPK+F64JVJ1dQcIAvJYo2GFdTMyk4GVP:g1ppM48XMGg+bVJHFIAvCx0Mykhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1983cb883d67f167d88ad3b35fa20001_JaffaCakes118

Files

1983cb883d67f167d88ad3b35fa20001_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\dr zinou\Desktop\Stub WinZino\WinZino\WinZino\obj\Release\system32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ