5e190fd7f2296f39dedab3ba40c631cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e190fd7f2296f39dedab3ba40c631cd_JaffaCakes118
Size

44KB
MD5

5e190fd7f2296f39dedab3ba40c631cd
SHA1

fa0eec183dc7ba11aa2132b7fecab88b0fbd94b6
SHA256

f1d69c44518ae668d2a1d58e0d29a495aec57bcd349efb69776444fc4facd224
SHA512

2bcb04155a44c220f2437bf3b045390f31597b63f035d34205205834f42af35e315dd0d920d3af111beec79a79d0b48d6ab41a0098e87ed3225ddc66046419fa
SSDEEP

384:fu+Rlf7KzEB/QeP48FTWsgu3WPnLqOeYTYdXhc7qcappnLk245sohK0ofa3X341l:xzfuQBvP/wTuxxVUapVrohjo8gQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e190fd7f2296f39dedab3ba40c631cd_JaffaCakes118

Files

5e190fd7f2296f39dedab3ba40c631cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Owner\My Documents\Visual Studio 2010\Projects\Stub\Stub\obj\x86\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ