765afc8fc1a475ee65c49d32715e910e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

765afc8fc1a475ee65c49d32715e910e_JaffaCakes118
Size

154KB
MD5

765afc8fc1a475ee65c49d32715e910e
SHA1

913bbcbb319adc76c9055e675b8cef9151832b49
SHA256

df234b59394c95b3e0504726be00c33bbb1f8ccca70bb6059a17e88ba6d2ea50
SHA512

43b3aa4726596d971411ee9dad226971ade1d36cf00bdc57cfe9540f54e2d8803bd894743c33848b53b769471a6d28c3cd5c256f8ba333987b125ebb5797a592
SSDEEP

3072:DJAqqAiL9FMjFWvKfSL2Cv2KORb2JhQMuTJK5tO1:vDqKaLgdlTJj1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
765afc8fc1a475ee65c49d32715e910e_JaffaCakes118

Files

765afc8fc1a475ee65c49d32715e910e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Home\Documents\Visual Studio 2008\Projects\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ