6a64c383d4a82a77ce6bd565bff90816_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a64c383d4a82a77ce6bd565bff90816_JaffaCakes118
Size

63KB
MD5

6a64c383d4a82a77ce6bd565bff90816
SHA1

1647266ed2584f090e7417101d6787afdaa36742
SHA256

7f41ac94840b4cdf02e5da1c8be42cc0703782e7e62aeadfc1de31027e58c5c8
SHA512

d6e6c603eab43c9ccd33a753c9be4c7a13c495da5d12052f3a43ea89a0ebbbad1362d2bb74093cdc3a7f1c60cb1f379a428c305debf54fd4b53f88713830def0
SSDEEP

1536:TymeOjfia4YqIh80lG9i/prMclrHQhoLCV/K:OmeOWEqL0DNrHoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a64c383d4a82a77ce6bd565bff90816_JaffaCakes118

Files

6a64c383d4a82a77ce6bd565bff90816_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\James\Desktop\Source Codes and Projects\xStubRC4\xStubRC4\obj\Release\xStubRC4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ