a5a509f54241e8f0fcc80c2204ba40a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5a509f54241e8f0fcc80c2204ba40a8_JaffaCakes118
Size

98KB
MD5

a5a509f54241e8f0fcc80c2204ba40a8
SHA1

2f7b74e66421a4e36913699c95272a76c286b17c
SHA256

2d48f480825ade85edc8bc2b01740b64b98cd4ece65a77170f718080b85142c7
SHA512

bc5db291eca561f67d9da924936ab32dba04f68223d0c523066e090e4d740f4fa73ab0b2db0a3c17693ed4becd2a39fc9f127cafd8d6fdb3ef6819d03adf9393
SSDEEP

1536:Tymet7+cvl9rVONZVfH3p9IXEQyw2nMazE61yXO0ukfnEp/mJuGiwg633otztvdQ:Omet6cvI3MJaQJuGdznovlsL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5a509f54241e8f0fcc80c2204ba40a8_JaffaCakes118

Files

a5a509f54241e8f0fcc80c2204ba40a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\James\Desktop\Source Codes and Projects\xStubRC4\xStubRC4\obj\Release\xStubRC4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ