941064598b0de2474971e20fc1b2f065_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

941064598b0de2474971e20fc1b2f065_JaffaCakes118
Size

49KB
MD5

941064598b0de2474971e20fc1b2f065
SHA1

4457e47a76e5b3273c32063a8128c96c81d762d4
SHA256

03a12cee98ab0a23a161d05fb9e4f7d79ea85d73771895008a88e0d2e2832efb
SHA512

81d76ad312b258b65fdd00d55324f6992b260d8fce889a38fdff06da103348a193001987655a48fbc4324ca72ce3e44d9b63ffc6a62f60ac4d34437f02819a52
SSDEEP

768:h3PP0VmPTNkIvI0SUq4ghIJV0YmEvl/R4l//KrJWuzbly8rQQgLaIFoKBTkzI:VP88B1vuNhcuel/y1AzRy8rQjLJNmI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
941064598b0de2474971e20fc1b2f065_JaffaCakes118

Files

941064598b0de2474971e20fc1b2f065_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FEDERIKO\Documents\Visual Studio 2008\Projects\Fedrypter Stub 2\Fedrypter Stub 2\obj\Release\F3D321K0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ