2ce87b4851e5b45dfbf953742e70bc9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ce87b4851e5b45dfbf953742e70bc9c_JaffaCakes118
Size

14KB
MD5

2ce87b4851e5b45dfbf953742e70bc9c
SHA1

fa73298824e9b407810f4672af568a31c7e7399c
SHA256

4783060d7466721f7d916ccc4b8b54e08d04cc7d27c830f06fbf23e83274a3e3
SHA512

6bcc3ed6ae6aa52d845b26b8efac52d32f4e2ead97cf21509538066a6cddc9bb1712ef87b30f027010adfb8742d8567c01a8d20307e60a03ea3780bd0aff66eb
SSDEEP

192:PAeeQITSqBsvGAZmP7nloYk4cNIMLTjvnw9ZJAGZ3iq1N:PvmSqBpA6u44zLTr2ZWc3iq1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ce87b4851e5b45dfbf953742e70bc9c_JaffaCakes118

Files

2ce87b4851e5b45dfbf953742e70bc9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Vysse\my documents\visual studio 2010\Projects\Stub\Stub\obj\x86\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ