847bd73d07fdf6c82ad2ef6e6bce9b0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

847bd73d07fdf6c82ad2ef6e6bce9b0b_JaffaCakes118
Size

203KB
MD5

847bd73d07fdf6c82ad2ef6e6bce9b0b
SHA1

ab4abf16a25bbc564f8f81dcf6c754973b7cbfd5
SHA256

d1ce64952d222eeafd5833b4038dbbe76ed7b452c9f4163ea87edaa3f7b7eb82
SHA512

88111553d5873c47c42a59045c22d3550515eec24e5b72e4da6e0fe0203108e4804cc4e828076a5b1592fb28b560b425a8d165ad88aff32222fee4926a0f618c
SSDEEP

3072:px3wGj74ougGdrzJwM/mYe3IRrkiHDVPg14ojxJCU1M4jIIKCFaoV:DVnV3IRxDy14qJCUd1bpV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
847bd73d07fdf6c82ad2ef6e6bce9b0b_JaffaCakes118

Files

847bd73d07fdf6c82ad2ef6e6bce9b0b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

aspnet_state.pdb

Exports

Exports

_STWNDCloseConnection@4
_STWNDDeleteStateItem@4
_STWNDEndOfRequest@4
_STWNDGetLocalAddress@8
_STWNDGetLocalPort@4
_STWNDGetRemoteAddress@8
_STWNDGetRemotePort@4
_STWNDIsClientConnected@4
_STWNDSendResponse@24

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE