8603e88e29ffa780d9308e122f480d3c_JaffaCakes118 | Triage

Sharing

General

Target

8603e88e29ffa780d9308e122f480d3c_JaffaCakes118
Size

56KB
MD5

8603e88e29ffa780d9308e122f480d3c
SHA1

064ce4fa9e76d736e34274d1b5fc723094a81b45
SHA256

e97d499c316f55c0ad78e979abdfc7e22ef4a57373da2589afce5420f5b0a536
SHA512

fe31258bde36f9fefafbf32c5d1e309f82de4b1a66b833842d1445d3630d940c403215775b95a56c095af6fa943abab74d6ac095890a5b8a1a508e8095959309
SSDEEP

768:bW7CC1tOSaMTDT/RmyHZ+MTDT/RmyHZ+MTDT/RmyHZ4:bGhvzfBRfBRfBm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8603e88e29ffa780d9308e122f480d3c_JaffaCakes118

Files

8603e88e29ffa780d9308e122f480d3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Saraya\Desktop\my Projects\Binder\BinderStub\Binder Stub\Binder Stub\obj\Release\Binder Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ