2e398ccbcadcec4190855dcc28d50f6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e398ccbcadcec4190855dcc28d50f6c_JaffaCakes118
Size

578KB
MD5

2e398ccbcadcec4190855dcc28d50f6c
SHA1

09de4040c5daa3ffa0a9dde9302d6d8183f28fc7
SHA256

1539adcf046c3918e8edb14cb1b3d2754799277cc779adb8226da01fa5981e8c
SHA512

f80cd80a65e5d0fd7a7d6d30a8aa25a86d4fe187892892844ec91de917d0ad041187e8d5074998e66cbd24cc5afb933f2c56b0361e2a4d3b0a5bc78c71d87049
SSDEEP

12288:BNtk8zA0Ltto/OToWjXHPhQBeAaIOEAMLRpXqgIrsE0qr:BNm43jOu74H6tsDqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e398ccbcadcec4190855dcc28d50f6c_JaffaCakes118

Files

2e398ccbcadcec4190855dcc28d50f6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Bhavik\Desktop\stubbi\stubbi\obj\Debug\stubbi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ