41bcfb1f463384d10ec7ceab45ff5b05_JaffaCakes118 | Triage

Sharing

General

Target

41bcfb1f463384d10ec7ceab45ff5b05_JaffaCakes118
Size

1.9MB
MD5

41bcfb1f463384d10ec7ceab45ff5b05
SHA1

e5c9c3f6c8da784039044a30c1a9c328d01c5439
SHA256

7a6ff237d89319963b9f4b15017b8e4cb07cd7bc8c48abe4b19da5f25abba01f
SHA512

6b8bda525edabe0a735bcee7310ca87691ac66922ea618e4408f2d001bcdfd16ee09165ae64f37c97a0b8f9d8355a8537446ab1f1e000412e8a74f6d5dabdc19
SSDEEP

49152:xSjTZfp15enfjNxZiZzlvDhmCBWUhBNXClEKy:xSB81iZJFZBWyNpKy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41bcfb1f463384d10ec7ceab45ff5b05_JaffaCakes118

Files

41bcfb1f463384d10ec7ceab45ff5b05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Neila\Mes documents\Visual Studio 2008\Projects\Miharbis binder\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 173B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ