308c9ce68e0691b69530e14dbe193812_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

308c9ce68e0691b69530e14dbe193812_JaffaCakes118
Size

1.1MB
MD5

308c9ce68e0691b69530e14dbe193812
SHA1

39fa1f5f19fe8b2a6b05e10478b77faac9f81b92
SHA256

9523b737e890131142215c2690eab2a3fa73a1e9edb854b6a57cef4a20f9568e
SHA512

0cc211da9b9821c30a1390609d2271b4cc608247778cba49deccd5d42e60c9ba495674a157c2c00314a8b5301a313a8961208caa123aee94b66099ca709ca6a1
SSDEEP

24576:WRL+khDOBj4EJqyUdODqz6IMsHpN/mmIDc97:WAkhDOBj4EJqyUdUqzLhpN/mC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
308c9ce68e0691b69530e14dbe193812_JaffaCakes118

Files

308c9ce68e0691b69530e14dbe193812_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\nathu\Desktop\Sickrypter Mini Version 3.0\Sickrypter v3 Unique Stub Generator\stubgen\stubgen\obj\Release\stubgen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 450KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ