27fbbedc93ad015a95a7c47bf7f7249a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27fbbedc93ad015a95a7c47bf7f7249a_JaffaCakes118
Size

21KB
MD5

27fbbedc93ad015a95a7c47bf7f7249a
SHA1

511fcee5d27321d975565847558214d208167852
SHA256

083ae0462bb7717519cfe3b56aba1769b957e2418f1d9566798ecee39e16731f
SHA512

3f704c854a31f7ee42b45402aa35ab1deed5180166fc50a6a3168b22c8ce8c04eab5229ed36f4078f8dcae76b84dc29181cd9bf90bfda0034debf78ab3154dc3
SSDEEP

384:RfkioEDfveILdu1DFXQLk24jXPlswa3XEWa2Dcig8RI2HgnnngCgognnvjk70F:ei7DWILdupVU2XPuo8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27fbbedc93ad015a95a7c47bf7f7249a_JaffaCakes118

Files

27fbbedc93ad015a95a7c47bf7f7249a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\user\Desktop\new programs\stub1\stub1\obj\x86\Debug\stub1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ