35a9509c3a0fe548becb892d2d50ba74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35a9509c3a0fe548becb892d2d50ba74_JaffaCakes118
Size

580KB
MD5

35a9509c3a0fe548becb892d2d50ba74
SHA1

0380e27ebc21d9b8d79f8cb188bf40bd82be13e6
SHA256

dc3fc56118c0f6f0923a719fa96695a31a02d8cd87bd6b8597dcb45f7ace6e5e
SHA512

0de7931b4356bc6d226268d23d31d5e294f25dbafe7be510a694266c73eef1135f92c45f0e4635a52f192bffe21c5d5f34be5d552b0d900e64e2520e3e53bbb5
SSDEEP

12288:EpWkQ+GArLX+YxTuyEOKAGt5S2TE7alN8h9wMTp/UG6NwvVtF/luh:60+GCLOsudOKA8NTOalNuwop/dr9r9uh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35a9509c3a0fe548becb892d2d50ba74_JaffaCakes118

Files

35a9509c3a0fe548becb892d2d50ba74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Users\Peter\Desktop\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ