3a190434217189aa0ee5b583cd9829ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a190434217189aa0ee5b583cd9829ea_JaffaCakes118
Size

216KB
MD5

3a190434217189aa0ee5b583cd9829ea
SHA1

42dafed5f4b9da512877d2e4a25b434ba7fb08f6
SHA256

a2b083d0accc689a6a81a493573f054f9f347414616d5b411062d917ce9cdca5
SHA512

2ec741a347c1ba687714161f44670f06a26f1d72f56f3b9326b92c7c6f4cf945c46af7537214543b16f4ab606a64abe4a22833d51bf222474c997c70038be40b
SSDEEP

3072:LmYZAWkdJqxL8zymq3hiTBLEGAgwapWRan8baRYX2NCIHIxCLsVmFilOVwPjt45X:R3kdSawsi12AqmHuMborPt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a190434217189aa0ee5b583cd9829ea_JaffaCakes118

Files

3a190434217189aa0ee5b583cd9829ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Rachid\Documents\Visual Studio 2010\Projects\Stub\Stub\obj\x86\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ