4d8324b9c91917d852e304dfa16d695e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d8324b9c91917d852e304dfa16d695e_JaffaCakes118
Size

33KB
MD5

4d8324b9c91917d852e304dfa16d695e
SHA1

a7a3b940f4a8996a0dc4b3fd0a52463c84e85582
SHA256

175c935010b239cc9605f27450ee3d0d5c472dabc51c196c7fbc7078e957829a
SHA512

8fb6c94b1d4da4f0c9a011abe17bb5835a587b97982e212ac64410241ff8e3b408c7453869e6e7e90f25071f355b041bdfe1e5c0f822b6aebc9d48d8b58dfab6
SSDEEP

768:7n79mP6NeYE7jAinxLAWC5sfjTUVBKRW:jhmOdE7R/CWfjXA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d8324b9c91917d852e304dfa16d695e_JaffaCakes118

Files

4d8324b9c91917d852e304dfa16d695e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\PwNaGe\Desktop\xStub\xStub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ