2211e7a8d6c63e44f510fc1f67c4e39f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2211e7a8d6c63e44f510fc1f67c4e39f_JaffaCakes118
Size

328KB
MD5

2211e7a8d6c63e44f510fc1f67c4e39f
SHA1

8b9c09dccc5a6cccaf2ee3357a4465dd1677d566
SHA256

218363e8e71e5b69cead96c0755341a54a17ccd23d9fc84f423bd124ad1400bf
SHA512

1663fcab48471dcb89c622fa70ca992b177ccb59b2e0282afdbe3cb82714812741d5db250a2750b4c5a887df2101c71b2ef88ce6b7d300e538967af34a5845b2
SSDEEP

6144:zduCNADYQGxMzzm4vHwc29nc7o6ZQJ0BxH/rWIf88P027TyMBcAwiOn:vm0xMzKmsypZQJ0f/aIf889PXnOn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2211e7a8d6c63e44f510fc1f67c4e39f_JaffaCakes118

Files

2211e7a8d6c63e44f510fc1f67c4e39f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1134\My Documents\Visual Studio 2008\Projects\72389 binder stub\72389 binder stub\obj\Debug\72389 binder stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ