71ae5682b80befe6b7533a313bf9060b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71ae5682b80befe6b7533a313bf9060b_JaffaCakes118
Size

504KB
MD5

71ae5682b80befe6b7533a313bf9060b
SHA1

8bc5e3eaf21a071240252388b191fa6270d21a45
SHA256

6ff02fb2f15b7480c4b5d7eed486718a8f3d7a0bdc64ad7095ad93b375e87155
SHA512

dd3cb2f814a92ecbca57908e0b831fac50d8f504d6d3445bdc4497b53aca67ae71824aa4c709a40e07c58538896e5827f5a2bf0055e4be312617d2d5d99aeafa
SSDEEP

3072:qhiJ0Isl+BIjp0Isl+BIo0Isl+BIo0Isl+BI1bnMM0Isl+BIo0Isl+BIo0Isl+BQ:Z4lp4lc4lc4ltnz4lc4lc4lOYea4lA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71ae5682b80befe6b7533a313bf9060b_JaffaCakes118

Files

71ae5682b80befe6b7533a313bf9060b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\VB Projects\Stub5\Stub5\obj\Release\Stub5.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ