38f0736a11be71801aca458a5335d018_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38f0736a11be71801aca458a5335d018_JaffaCakes118
Size

1.1MB
MD5

38f0736a11be71801aca458a5335d018
SHA1

cf859eeade86c36aa799dd7955878d1bb87639ee
SHA256

75b5e3b87971ff33f3eb02cd1cf6ad7d6a37177c805e86a2a004bce1598f9448
SHA512

54cfd3a53a73d34dfe3d895eab7a2e93f284b994a399dcf73b165f16b8ae6bbc47f86dd407854618e7e76beee62ef58a9885e7f9f8d819c90f199f88e1c64a6c
SSDEEP

24576:2Vn1CCGRmyartWB1IRm4gI2un2LX9/Y0Ecg:kn1C5RTWtWXIRm4gI2pX9Aag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38f0736a11be71801aca458a5335d018_JaffaCakes118

Files

38f0736a11be71801aca458a5335d018_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1134\My Documents\Visual Studio 2008\Projects\72389 binder stub\72389 binder stub\obj\Debug\72389 binder stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ