b18a593a601785f529a24ae21e4f9ea8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b18a593a601785f529a24ae21e4f9ea8_JaffaCakes118
Size

495KB
MD5

b18a593a601785f529a24ae21e4f9ea8
SHA1

0b165f9ab9d072806dad1caa762fca447eaba248
SHA256

7edc8a82b57d2dd3c125501b209894ba7482e069f20528c862584841f980dbb4
SHA512

b298bab4c73a29dc27a9d0e4a6e40a37db38d5b34b2ef6728198d327a1649329fb717a3ccd6e475e73f00902e03a9a62a560534e8c3819008b0796c7855f7c2f
SSDEEP

12288:91rI+U+2G6MgShdiQThT8njM3u/BHec/pt:nHXWkhAehT8njgupN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b18a593a601785f529a24ae21e4f9ea8_JaffaCakes118

Files

b18a593a601785f529a24ae21e4f9ea8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Robert\AppData\Local\Temporary Projects\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ