886a045c685b1b9c88402a8b8433970c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

886a045c685b1b9c88402a8b8433970c_JaffaCakes118
Size

808KB
MD5

886a045c685b1b9c88402a8b8433970c
SHA1

1dfca2261de5277c8bbae13a7bcebe6d16e77e83
SHA256

167d680b57c2423db451875c94d346820e77258ff8265910ed2ef6fabfeb217e
SHA512

ab74468cb67fd8f532639dc4a57164056408dd36bf9afd9a45d8590cb252dc1299f6fa4ded24e49094531040313fe8442b7829d525b9808b02e2952ed5fc7a13
SSDEEP

24576:pkYevGqDJiNAeAlU+oupOh2v31SG/k5lv:pk5vGKI6zpOg31Dy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
886a045c685b1b9c88402a8b8433970c_JaffaCakes118

Files

886a045c685b1b9c88402a8b8433970c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\florian\AppData\Local\Temporary Projects\stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ