6494b4c8d2473b2d86aefbf657c46739_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6494b4c8d2473b2d86aefbf657c46739_JaffaCakes118
Size

3.1MB
MD5

6494b4c8d2473b2d86aefbf657c46739
SHA1

ae6ca5c26191df15c30698681f76d28cb1bc1adc
SHA256

1703709f201144d92ab6b8944d874f51405873fc27f5920b251a70c2540bea4a
SHA512

febc252293969a35af3403fedb1215309ac5bb97ad0e2f3c7a81468af6be681b2111a2dfcd27096e5ec0a49373a5d640a2ce450380f21ca509d3ea528a8c9823
SSDEEP

24576:3p4LRgd7zPIXwBPDjfIdv0hMsqKjGXT43GcS3NFE//Tct4bOs/BEXZrpLsBbehDN:ZaXwZDQs/mHSV/iXppqelVUY2ScQz5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6494b4c8d2473b2d86aefbf657c46739_JaffaCakes118

Files

6494b4c8d2473b2d86aefbf657c46739_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\--FOUED--\Desktop\VB.NET\Nathans Binder\Nathans Binder\NathansBinderStub\NathansBinderStub\obj\Debug\Stub002.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ