a10fe0939a9311bbb2e1e775fa54d7df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a10fe0939a9311bbb2e1e775fa54d7df_JaffaCakes118
Size

509KB
MD5

a10fe0939a9311bbb2e1e775fa54d7df
SHA1

48b41f76cc45fbfe3419756de2c551c1bed75c81
SHA256

2496c02e53465e3d512755db41cd4b367d8df07a31e2a52825b7b8f226c9b098
SHA512

533dff11d67ada80e77809a16a0ebae8433278fc4d9633c3cdf57e505fdae1aa2df746cf8310e3253b2d3e9dfa6ca9ea2e2888bf486f6f412a4ecb780438550e
SSDEEP

6144:Ha3PfcKrKywdOQe5jFxpilg18nTNbvsVb3SVnOQe5j9a3PfcKrKyw:CdGyZxAR4VrS3dGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a10fe0939a9311bbb2e1e775fa54d7df_JaffaCakes118

Files

a10fe0939a9311bbb2e1e775fa54d7df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\PeterP\Desktop\vbshit\Nathans\Weekend Binder\simple binder 1.0 stub\simple binder 1.0 stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ