aeaeb250cd5a5a4df4037e0a1a14b6ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aeaeb250cd5a5a4df4037e0a1a14b6ac_JaffaCakes118
Size

37KB
MD5

aeaeb250cd5a5a4df4037e0a1a14b6ac
SHA1

c6340fc15eb7b919be63afd9afd81e62f4a338e1
SHA256

ea40ab15a3ccbb5911c8ac5c90e7a7cb6da5316eae26ebf1da2c48dedc137cc4
SHA512

f6c88fdbba225fbce5da6c6997aa99bfdcd94e2bea0aa0ee9deadf7f843e569201fb9865ef559c8c0010c0f0278a28f7a938510f2beef7751a8499d9cab307cb
SSDEEP

768:TadnI6EOu4N4VCMnYzm62laArpLR3Q5BQFBzJQ:Tyme4QM36kD3Q7CBzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aeaeb250cd5a5a4df4037e0a1a14b6ac_JaffaCakes118

Files

aeaeb250cd5a5a4df4037e0a1a14b6ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\James\Desktop\Source Codes and Projects\xStubRC4\xStubRC4\obj\Release\xStubRC4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ