2c9ea4ac5c1040819b7fd3f204f63db5_JaffaCakes118 | Triage

Sharing

General

Target

2c9ea4ac5c1040819b7fd3f204f63db5_JaffaCakes118
Size

22KB
MD5

2c9ea4ac5c1040819b7fd3f204f63db5
SHA1

1f0b47ec062bed1a6324112e4f0a4f4d075d83b4
SHA256

1cd8c65d1a9a8d09b0f67327cee9ea7c1a9e652a3805fc500cd2fcc3814983e3
SHA512

05558c8739fd73b7db17264b81997bf8aab908b22cc8b0d9c0b88c067e08aec3fb556a24f6088893211d048a23b90e61ca118991db9418adcf190a5997136834
SSDEEP

384:mdMC6cb1eFMmkAGEFu6L7T4zsASSo+dNXjqbunIgPE5:mdMCnhmjGADoDdZXq5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c9ea4ac5c1040819b7fd3f204f63db5_JaffaCakes118

Files

2c9ea4ac5c1040819b7fd3f204f63db5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\mtopalov\My Documents\Visual Studio 2008\Projects\Stub\Stub\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ