36c980ba58686906d0100a7902bdc574_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36c980ba58686906d0100a7902bdc574_JaffaCakes118
Size

1.3MB
MD5

36c980ba58686906d0100a7902bdc574
SHA1

3c4c381798a2e5f7951f4257b78648e602978469
SHA256

dd2d4195107859055beaa9b73c9c244732a65986dede2a791c0f04166c4285d0
SHA512

8b419ba0caec03a6cd9e21e7e47e05a313cfc5bf28662b71332f0881198f754386e0533ca16b8f069509679c9e00bb9984341ef6ffb9b8c4f765c8fdd46a6fea
SSDEEP

24576:1P2sqA0IRFioTNVGjBMep16uzYQS3evgQ9Jtvp145:MFrIRFio5QjrL7zjsTQnBzC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36c980ba58686906d0100a7902bdc574_JaffaCakes118

Files

36c980ba58686906d0100a7902bdc574_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Jovan\My Documents\My Music\Nyc\StubPredator4.0boy\StubPredator4.0\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ