8ba73e50e6ade28e72f395b398fb74c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ba73e50e6ade28e72f395b398fb74c3_JaffaCakes118
Size

450KB
MD5

8ba73e50e6ade28e72f395b398fb74c3
SHA1

b2d76baf1d3fa2e195866a1775c366bdee1704cb
SHA256

6bb1cd6bd59c60ecf98964c5d916d058724e684e6acf53e4094191af6df0f3be
SHA512

afc7465a3cb3022c12d5a8532eb462ec42661f7f4371afbdb9cc287e82ac847b6f29a4a1b187fcbdb9ff825dce6b88b970b630143bdfdf5db94a8fe4917a3752
SSDEEP

12288:qzoKMqSPFnu2wr0B/o6r3f9AfXiyliZOi8:FKMqqdurIB/93f7y8Qi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ba73e50e6ade28e72f395b398fb74c3_JaffaCakes118

Files

8ba73e50e6ade28e72f395b398fb74c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\HADJYPUB\Bureau\Stub\Stub\obj\x86\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 434KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ