8bcd0cb08972e16fba0a086ad4a8ef7d_JaffaCakes118 | Triage

Sharing

General

Target

8bcd0cb08972e16fba0a086ad4a8ef7d_JaffaCakes118
Size

73KB
MD5

8bcd0cb08972e16fba0a086ad4a8ef7d
SHA1

aebfac9f69265110521a5442a750958110f32a7f
SHA256

7b9e0988b614afb846b2164425e6b3ccd8a20bb89f530fb80382ad05155168d3
SHA512

de2b1241aa97b4a31d464c9aa57206f1992aa896238786ba495b89668e2a57c1e244ca749eab04f8f89444c5b778d82eac757482ed25191dabc2ad55fafda5a2
SSDEEP

768:My3A5qlys0I57WgXI+TlIG0dxXv7eN269p8bBy3A5qlys0I57WgXI+TlIfR:b0IlWl+BIBd4D8b20IlWl+BIfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bcd0cb08972e16fba0a086ad4a8ef7d_JaffaCakes118

Files

8bcd0cb08972e16fba0a086ad4a8ef7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\VB Projects\Stub6\Stub6\obj\Release\Stub6.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ