28790bc5fce5b6d480ee8b7c0abb4302_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28790bc5fce5b6d480ee8b7c0abb4302_JaffaCakes118
Size

432KB
MD5

28790bc5fce5b6d480ee8b7c0abb4302
SHA1

b89f9bf8a8670f3b9211c0fbf1661ad7c413ecdb
SHA256

1cac32216ca46ab72c4873d00270554b620c9ed6ee62b63fc08c0e9003dfb636
SHA512

323f1176f768e6f6e300e230a11769f4530b9314ae36ef689e2d81ac0347564c531b5d15e85c3812141a960ffff057c0d86cc5de8d95496589e7f667dded8d38
SSDEEP

6144:pxpilg1a/9Z0OXf+shkCfOJnyGp/qZ/9Z0OXf+shkCfN:pxGV9f+cGnLpSV9f+c1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28790bc5fce5b6d480ee8b7c0abb4302_JaffaCakes118

Files

28790bc5fce5b6d480ee8b7c0abb4302_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\PeterP\Desktop\vbshit\Nathans\Weekend Binder\simple binder 1.0 stub\simple binder 1.0 stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ