631c9f0470c0c2366bdb5e483ef037f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

631c9f0470c0c2366bdb5e483ef037f1_JaffaCakes118
Size

89KB
MD5

631c9f0470c0c2366bdb5e483ef037f1
SHA1

89c31d7d1dd6100b7ca25d013620e1f75699b623
SHA256

7f8fd0f5a672085db075b2b3d528b3b74ca43ee0abe15114f0c8b3334498d849
SHA512

8deeb7332b48192c9b3ebeb399997f8bc20735711ae14327b5ff4ece48ac6c90a049a1407951de8d6bb5c4811957b6c2f2d211427116487621ab55f1adfba100
SSDEEP

1536:xcsbRHonlDhBBLMHlzSByFNuQ2/Dr8ElWzz9Phv:msVIllB9MFzSBcuPZlyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
631c9f0470c0c2366bdb5e483ef037f1_JaffaCakes118

Files

631c9f0470c0c2366bdb5e483ef037f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\WindowsApplication7\WindowsApplication7\obj\x86\Release\Stub2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ