b1236c10007477afe9fa4741ac0fc190_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1236c10007477afe9fa4741ac0fc190_JaffaCakes118
Size

2.4MB
MD5

b1236c10007477afe9fa4741ac0fc190
SHA1

25d9519fc2a56dba5216dbc21c99f325e982925d
SHA256

f8c8fe945e526c1195f6d1d5af39a6080b730a1e66a708294cfec0779161279d
SHA512

832276a6126cad0adef4ea4d60da0859fbdad4556d7e7a48c91f9b4bc155dbfd355d17f3e4456bcf907bfe9e946b6df923bd5216f33ce658fd7520f1fd368cba
SSDEEP

49152:vLnmQyJdirK/HLkv/n0bs2seB2ZHS0PLB5YyhKi6SqCayI:vmdpLk3is2seehKi6SqCayI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1236c10007477afe9fa4741ac0fc190_JaffaCakes118

Files

b1236c10007477afe9fa4741ac0fc190_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\Projects_New\Multi File Binder\MFBStub\MFBStub\obj\Release\MFBStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ