3cc2bf82d85a8c6b571a945985fde32f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc2bf82d85a8c6b571a945985fde32f_JaffaCakes118
Size

188KB
MD5

3cc2bf82d85a8c6b571a945985fde32f
SHA1

4f3ee888714428941ee902e0ae05d73fb9ecce47
SHA256

5072431efb6b2db9c4a2d27a883ce1f9469038b41e4a9efca95cfb7ae973d53d
SHA512

9e438a31c591bd8eebc901daafe0daca32235879aa5a0d6958d6eb5fdaec000900440f0c06b131a96e7a698c1ca203a8193cbcae102f36fc4a2aad7292193525
SSDEEP

1536:SjHWUBjVLTfo9YUKFCBy2uvl/0yBVBwU0yHp3JJWKucq++6G/xc3U:Sjtj5TFd6mF0yHBVdJxrI/xc3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc2bf82d85a8c6b571a945985fde32f_JaffaCakes118

Files

3cc2bf82d85a8c6b571a945985fde32f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Users\Megatron\Documents\Visual Studio 2008\Projects\EmissaryStub\EmissaryStub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ