8868f21be914075a737a7c33c462c13c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8868f21be914075a737a7c33c462c13c_JaffaCakes118
Size

200KB
MD5

8868f21be914075a737a7c33c462c13c
SHA1

fd382f78ee323565199c14e5a9fa49cfae5741e4
SHA256

28a972ccff166fba3a7ff043d7c46a32dbea01906bc546bf5054e1870ed0c0ed
SHA512

5b3ac6c79235dea7fe9ff669d40abe56e3580f06bde817f0c734a3c2ee3a3b486c7496b23b685ae080ec924ccb377c25c87110708ac582070a0236f897d1065a
SSDEEP

3072:6sVIllB9MFzSB/ucQhDs0gfjBCyPp0vZOpAIPhuYC:ML9MINmc70xOpAI5uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8868f21be914075a737a7c33c462c13c_JaffaCakes118

Files

8868f21be914075a737a7c33c462c13c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\WindowsApplication7\WindowsApplication7\obj\x86\Release\Stub2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ