4a19a351c33cd70e026d6efa5749f2fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a19a351c33cd70e026d6efa5749f2fe_JaffaCakes118
Size

44KB
MD5

4a19a351c33cd70e026d6efa5749f2fe
SHA1

dc83ee07abe7e2eab4b0820089c291e01b854d8b
SHA256

0e147fcf8d6a6a7b375649d0cf0b8d3b0b1f982dfe9074312e1fd4591a25381a
SHA512

dd5c6c0986f48567cda4cba63bf03f05873200c22fd010b90424a78ada2aafa117d79b4340e6abe950bfc264f84dc8d8cc93b9d4a531f152e90f323a24d78fe3
SSDEEP

768:EdZb7U+uGBcU2q9ydawLXaIkjkqkhUZZZ3DIrd7Rib93:EdlB/2VnujkqkSZZZ3gdtib93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a19a351c33cd70e026d6efa5749f2fe_JaffaCakes118

Files

4a19a351c33cd70e026d6efa5749f2fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\basti\AppData\Local\Temporary Projects\stub\obj\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ