63a31b58b4f5a8390651d9a2d2c647ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63a31b58b4f5a8390651d9a2d2c647ef_JaffaCakes118
Size

341KB
MD5

63a31b58b4f5a8390651d9a2d2c647ef
SHA1

9e8a00a030afa2ccc8a47348dbe60fde91df989c
SHA256

071466eb50fba3023aa6a7e9d2b11888cf5ff08b8651478d91652b45a6903a1a
SHA512

cc44f3699679b0e312365fb2ba549b94f0acca13faad123917a6abf04a705064037c68f04b5e214693ae58cb759014c68e2cb91df5af01571c5f8b32a98ab2d6
SSDEEP

6144:aUpfNVYHu6SaUUl5nMZXXWxtwrgs587aDnOwU+Qnh/f1mL9lumE:aqnvgpMZkv2DnZU+Qh/dmiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63a31b58b4f5a8390651d9a2d2c647ef_JaffaCakes118

Files

63a31b58b4f5a8390651d9a2d2c647ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrador\Desktop\stuba.pdb

Imports

mscoree

_CorExeMain

Sections

.
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ