89f262fee3fe523e88223145624f4551_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89f262fee3fe523e88223145624f4551_JaffaCakes118
Size

15KB
MD5

89f262fee3fe523e88223145624f4551
SHA1

485fe3c55f8f63efaf20bff117c292c02d034e94
SHA256

c5007c41aa6a9d38ab5b8c32cfd7398e01f906bfac2d9f8133297cc534ca0c4c
SHA512

09f52f7b3a82a1504f6c2c37c0681d1f27f761055d04b1c108d8ea6471b85ab168ee17ea0ca28820fe85ee70454d3373a712b2a171ecdc693388111287e90364
SSDEEP

192:gQnDbIl+kgvuOxDCryc+fAZm0HnLKnloYU45uJcIhfrhwv8K26fF4HT6lY:FnDbI0kUZux+IBLf45nQfr68KE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89f262fee3fe523e88223145624f4551_JaffaCakes118

Files

89f262fee3fe523e88223145624f4551_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FEDERIKO\Documents\Visual Studio 2008\Projects\HS-Stub - Kopya\HS-Stub\obj\Release\D-D.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ