8cd175b371a231a9bb3bce7fc2d1fe6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cd175b371a231a9bb3bce7fc2d1fe6c_JaffaCakes118
Size

69KB
MD5

8cd175b371a231a9bb3bce7fc2d1fe6c
SHA1

2ddf26d3aef5c551135a4bb16750ad2f6021d2dd
SHA256

1ba4a84b2b30e12ec0220abeb39227b224db5cf7bcfd3b399993ba0508291b78
SHA512

70652d8dce33e8d796de9e71786ab22a5559338fcb4cad8ba4473fecba6a3169b0228b7f4402250b03fcc86c0ccf51c7442f2e5597d645333fad1657fe4b22f6
SSDEEP

1536:xUnxea0GvRWXgaPBltozxC+SBD9b31IaIJZVev:mxP0uRISYRDh31eS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cd175b371a231a9bb3bce7fc2d1fe6c_JaffaCakes118

Files

8cd175b371a231a9bb3bce7fc2d1fe6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\simplestub\simplestub\obj\Release\simplestub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ