4d1720536d11ccd3194436c306a7b333_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d1720536d11ccd3194436c306a7b333_JaffaCakes118
Size

18KB
MD5

4d1720536d11ccd3194436c306a7b333
SHA1

485972d70d6e131181b0fc9ac14ed95ead6b7021
SHA256

d6a3d74470493557af1fd890044f20b36c7b3ad97e2335067dec0d539fb5e941
SHA512

c34dafdf43605e4e5169a085a631af542de535f81e535c65b44779d90717da00d9d997da1c1fc1befcedd33856ff58c49a2d28a0b3c1065211e71d98f04edf21
SSDEEP

384:rdWfjXjHVCWP/Ft+k7Lf45so4OQfrw8+3w8:rdW7rVLnTj/lo46w8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d1720536d11ccd3194436c306a7b333_JaffaCakes118

Files

4d1720536d11ccd3194436c306a7b333_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Local Settings\Application Data\Temporary Projects\stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ