ac38a1910089a8f91056212cf3c92ef6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac38a1910089a8f91056212cf3c92ef6_JaffaCakes118
Size

554KB
MD5

ac38a1910089a8f91056212cf3c92ef6
SHA1

eeb01ce41bbab67739c2793b2ccc5fa79b9b0fd3
SHA256

18af253e52be96b36f8d2f6ea62a21f3ee98b6df609510e1d8a4f38cf3d4025c
SHA512

c41ea3ffe7d6eeafb1ffa87e15ea6c244c00ed3dc16fc1c49ce9c7e5525f380702c19ab6ed5cd0f0a56cd3aeb5200d4323b45c92f191e00f485636b07af72690
SSDEEP

12288:Rng+svuzCviRjRs21Qn0SECaVop9ZU6/8lik+M6:RngWzCz70SE7m9ZU6/8l/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac38a1910089a8f91056212cf3c92ef6_JaffaCakes118

Files

ac38a1910089a8f91056212cf3c92ef6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\AppData\Local\Temporary Projects\WindowsApplication1\obj\x86\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 532KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ