40e9dde09b614ceded7f818f990278f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40e9dde09b614ceded7f818f990278f7_JaffaCakes118
Size

472KB
MD5

40e9dde09b614ceded7f818f990278f7
SHA1

b141f046464b9942227b23bc5f9ac77e9d410e31
SHA256

5a3f88ddde8f0cb76f978839d5b1c4a15e2a17ca274b5ca98fa735ed47d8f292
SHA512

ab3d9f710aef817ec2a2a44ba3f9c83ffc5e707205db6d66ff877d594e97bf7945536e9dd606d10e2ccadde6d77f76d6f63f0caf19c8d78f58d8b4a9dca8a2fe
SSDEEP

6144:AaZ0DYtQcBHSQ9kdpnNd5MoI3Eih+syffMuoiRAeQptHqNscFDmhBU6AmW9NUzgQ:A20DYZM7NAAsruoAwpt6sLhmf9Cz6I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e9dde09b614ceded7f818f990278f7_JaffaCakes118

Files

40e9dde09b614ceded7f818f990278f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Kyle\Desktop\New folder\Sample File Binder\Stub\obj\x86\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ