2f471c7bf6425d270638d51bdb627654_JaffaCakes118 | Triage

Sharing

General

Target

2f471c7bf6425d270638d51bdb627654_JaffaCakes118
Size

97KB
MD5

2f471c7bf6425d270638d51bdb627654
SHA1

d4f2884e4c96087999dd18549d46581367c3383f
SHA256

ac9978154a90fc1a510f81be5e30b733c065c767660df7d9ce577f41b23772b6
SHA512

4ef0a95b367913d30651586dc14d78b30ff2c4c25c9483fc0fcb3ea7db066c1417f7a1bbaa4815bf0da1ef1ca24e51d32907ad2f7f4e431d13b9034ac786c045
SSDEEP

1536:OAn0oppM4wDXMGpPK+Fa4ltl54YSpIlslaKTyBLIjyPg:R1ppM48XMGg+ztUYSpJTyoAg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f471c7bf6425d270638d51bdb627654_JaffaCakes118

Files

2f471c7bf6425d270638d51bdb627654_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\dr zinou\Desktop\Stub WinZino\WinZino\WinZino\obj\Release\system32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ