3b0b0a030464c2b94509adb354dd3d07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b0b0a030464c2b94509adb354dd3d07_JaffaCakes118
Size

358KB
MD5

3b0b0a030464c2b94509adb354dd3d07
SHA1

31cc754fb21b35ab2311cba621df9893e6af15c6
SHA256

668c9c62114fe8d4898d4945719608c577b6305316958d486881454600133a26
SHA512

1dce1544974bedd3c70f6abb004b083e2956a15c24afb8f14373229ae13d70c38d3148622349708ff3ca5129aba94b6e580169ad38e8de904f7092dfd12969a4
SSDEEP

6144:hijfPaHsyLdcly1au3peX51eYmf8CjwF8U7vWN1/giv+G1g8l8QbsoQGHQ:h2PaHfLdlreJ88C6vWN1vv+G15zsAw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b0b0a030464c2b94509adb354dd3d07_JaffaCakes118

Files

3b0b0a030464c2b94509adb354dd3d07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7a57b8c307b8d231121bcc98d7108e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Soren\Documents\Visual Studio 2008\Projects\yinpublicstub\yinpublicstub\obj\Release\YinStub.pdb

Imports

mscoree.

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ