242ff1717a957b8aa2b6111e17ed03f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

242ff1717a957b8aa2b6111e17ed03f7_JaffaCakes118
Size

140KB
MD5

242ff1717a957b8aa2b6111e17ed03f7
SHA1

ec2981e90fda4d8ded53c6fd9c4c973d67fe343a
SHA256

22da064606561f124da81b09c64f7dab71c5640734c50d27031f1274cc25c7a6
SHA512

b5dbcc77114d78ca5a0cf55b128df2a54e07f636e4e5e20e4701b818fb620d6b7c69f5128e1b425fd2bfb4812e4293bf7758d308654d779c00b5c0dc9e494c54
SSDEEP

3072:Wdiz7pBEJB4fXBgu9ZGjqF9uQGKHoVZgmNVVn+sW2Pi:Wd4pBs4BnGjqL3jkpVVrPi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
242ff1717a957b8aa2b6111e17ed03f7_JaffaCakes118

Files

242ff1717a957b8aa2b6111e17ed03f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\error1\Desktop\stub\stub\obj\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ