66a1343c742bbf2f1752c68f3580058e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66a1343c742bbf2f1752c68f3580058e_JaffaCakes118
Size

334KB
MD5

66a1343c742bbf2f1752c68f3580058e
SHA1

9588cae6c24583534a77d53d275cb1d398585aee
SHA256

656cfd72c99a65037ee278ec53cbadabe56f7bfe06e7da7626a239136e466277
SHA512

aebe773d694361837c37e804638378b84b4f3fef39cb7103139c1c9dd2955bdc55e2f2c778ba42c882587ef0a34c0c1be8be66db2537399c1ed5f64f9d69be4c
SSDEEP

6144:Q+1gqT0cWuFTmWaFaBXjwHk+WL82BYlCFYFdg0ayoVbB:Q+1gyo0aFATwE+Y82KUz0abVbB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66a1343c742bbf2f1752c68f3580058e_JaffaCakes118

Files

66a1343c742bbf2f1752c68f3580058e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\My Project Dot Net\DZRYPTER\Copie de stub\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ