4bf7c5ff651c374d89b66a3dc1671a2f_JaffaCakes118 | Triage

Sharing

General

Target

4bf7c5ff651c374d89b66a3dc1671a2f_JaffaCakes118
Size

551KB
MD5

4bf7c5ff651c374d89b66a3dc1671a2f
SHA1

d373e1d0e0538d20aa7eddbd877b45ea3c00c32f
SHA256

77b1e929c02a8b0f435c707a660ef6ae1034a2e325eae497c5d7dd407e723219
SHA512

dc146571853f68f49b4960e135d239be17e649b054f236adf8c3619bc2794e5ce3359911e6723fd1772a28622c205bf8db85d2034cb856f7fc5c49c1e55bea4a
SSDEEP

6144:hrNu9H56d/0wMOVSyHJ9NGOAzHC3FGz+fhV2RajcZ1VmYGiTde+Mpv8qaJ:hrNu90WvImQFGzIZj1lik+M6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf7c5ff651c374d89b66a3dc1671a2f_JaffaCakes118

Files

4bf7c5ff651c374d89b66a3dc1671a2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\AppData\Local\Temporary Projects\WindowsApplication1\obj\x86\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 529KB - Virtual size: 529KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ