95d47e6fe6407621297331ef277e6557_JaffaCakes118 | Triage

Sharing

General

Target

95d47e6fe6407621297331ef277e6557_JaffaCakes118
Size

20KB
MD5

95d47e6fe6407621297331ef277e6557
SHA1

6acbc29ccb425e123eed081e8a3a00363e8916e7
SHA256

d8350b4684924731597be2ed1e3a9cce093611f9a006c0b4ef8489578b52f280
SHA512

61dec4365efb7fe2dec612e2ab7df53538453b9c069951d3584cc437ce9079a38d5a3e77d8b4204c9712be935111f0f535e86e8a7116bd2e49b179f10b86b76f
SSDEEP

384:HvP96uhbQGufiZn3+WaFolbvLf458QflV8Dk9bQGuf:73Zn3+HKbjeF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95d47e6fe6407621297331ef277e6557_JaffaCakes118

Files

95d47e6fe6407621297331ef277e6557_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Wr3cker\Desktop\Weekend Binder\simple binder 1.0 stub\simple binder 1.0 stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ