94ef5c120f18f41433952f2024a0eba5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94ef5c120f18f41433952f2024a0eba5_JaffaCakes118
Size

1.3MB
MD5

94ef5c120f18f41433952f2024a0eba5
SHA1

37c1aee443a759b752d0d78ccfdb5b38408b207e
SHA256

85aa47273dcee277518b57ee83c964053a97820dc5ae3981233bfdeb5c67cef9
SHA512

87584d025f3d806e62ce0ecf9ed8c6169488a40ce7d8a86b69c11d27c7858efbc751f291874d61801b201d441859ac96ba4daddb5f2fe5f864aa7a5bbffb3bf5
SSDEEP

24576:aSPTKlxjmnNVPxNecpf97TQJb3DCKs8oJOloccWXxPtKZqHgbX0rAJ:akT7nvPLJpf9vQh68QOlnXx1CdL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94ef5c120f18f41433952f2024a0eba5_JaffaCakes118

Files

94ef5c120f18f41433952f2024a0eba5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1134\My Documents\Visual Studio 2008\Projects\72389 binder stub\72389 binder stub\obj\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ