adf4728a00cc1fa65e7e0846d2938bf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adf4728a00cc1fa65e7e0846d2938bf9_JaffaCakes118
Size

386KB
MD5

adf4728a00cc1fa65e7e0846d2938bf9
SHA1

3ef82e8b2100baadf18a83af1ddddd3e3e650fe4
SHA256

0d32130a86cc247b4e6b4ec938e22dbd849ea7b78d8f28654042d0c4a6296549
SHA512

3cbfc74ecd126ccbe53864892fd3c838bbc8c4f2eb0a61aea07c8484eedf2e82eb3a884786fbb1e52b69598c271e06b359072db2b58656e4a121716d7b1cd46d
SSDEEP

6144:/B2j3R7KR7lgjGH6EMjcOLeMXvi3uSj/9vADXPZb:/Be3Zc7lgjs6VLeEGjVvkXPZb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adf4728a00cc1fa65e7e0846d2938bf9_JaffaCakes118

Files

adf4728a00cc1fa65e7e0846d2938bf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Ranico\Escritorio\Stub\Stub\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 125B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ