b07c997d09186995a477dc4b4fc94c8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b07c997d09186995a477dc4b4fc94c8c_JaffaCakes118
Size

63KB
MD5

b07c997d09186995a477dc4b4fc94c8c
SHA1

1a9400659b23950db0e4990dc10684ef4d2d6bd0
SHA256

112bb7ffca15c82d7c964cb3286edd21646a2e2389f90993cb61df7787e6c9ae
SHA512

aedbf41ec71c0b843ad5fb42d278af347ac4c9fd8ab4d1acb72a56d6190c1531259eeb20641cbf23a1086236d988a9766a31f49729fdc3ec18100fc3068783e5
SSDEEP

768:xhGN8T0iDyiWqTcIn5SKXqUQUmponL+4Rfo9sE2BVUKFCBufVsX0MgvoUL:TjHWUBjVLTfo9yUKFCBy2uvlL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b07c997d09186995a477dc4b4fc94c8c_JaffaCakes118

Files

b07c997d09186995a477dc4b4fc94c8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Users\Megatron\Documents\Visual Studio 2008\Projects\EmissaryStub\EmissaryStub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ