396fa3813b36f4774473a49572a9a516_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

396fa3813b36f4774473a49572a9a516_JaffaCakes118
Size

583KB
MD5

396fa3813b36f4774473a49572a9a516
SHA1

7c26d7055c38622867003d50f5a8a39f6edab29d
SHA256

1b606c2e901f30a03a24d538eb1f60188553dd075808f2a3f4108ca9cac05cd0
SHA512

f966e1a81cae32208b03df01c6c644d242858ed95f52545fcdfef3257e71f1d84b1e94f1c1d20e897a57fdb29d57d9640de69d9feb8188b2cab00c107d0e9aba
SSDEEP

12288:j2qdmbDRDMNid2ICHi+VzwSi3UDQk6aJ4Z5UYm2Dh2eLZ:jzdmBDMNiQif2tVJSM2Dh2eLZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
396fa3813b36f4774473a49572a9a516_JaffaCakes118

Files

396fa3813b36f4774473a49572a9a516_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\My Documents\Visual Studio 2010\Projects\uli steam stub\uli steam stub\obj\x86\Release\meganstoy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 541KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ