aba673975ef3997def00298d64d17f8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aba673975ef3997def00298d64d17f8f_JaffaCakes118
Size

267KB
MD5

aba673975ef3997def00298d64d17f8f
SHA1

9a53f6ef6c890ca43419a3f00c8373df2fde316b
SHA256

9b82c9f90a2befe7d60aece4844481141c60d10c1a98d9cb2d4f997ec2c56b8e
SHA512

44236e5a2d1fc98c959b607bb450ec6395bc029ba1087454a26e7d262e77de380dc62a42977f88b59dc253e3e1ad6093bab6dbfa068e254f7ace0465c36c1243
SSDEEP

6144:5C06bZnOhrBO1EATHbNL74NQf37b3O3ZnMSD26:5CBbYhrBqNHbNL7iU37b3OJx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aba673975ef3997def00298d64d17f8f_JaffaCakes118

Files

aba673975ef3997def00298d64d17f8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\haunter\Desktop\Sickrypter v4 Unique Stub Generator\stubgen\stubgen\obj\Release\stubgen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ