b471393e068e0f93ac3b6768ff8d5369_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b471393e068e0f93ac3b6768ff8d5369_JaffaCakes118
Size

137KB
MD5

b471393e068e0f93ac3b6768ff8d5369
SHA1

295795f9758e487ab98eba66e3d6ca5e759d44c7
SHA256

701bcc75e2e95e7b1a7bb0163b35253174f40eeee204b2071c4175f14240b17e
SHA512

2c97e5d8b279439b67a188f383e1ceeb12b2ccec138dfd3d1b0c915357bb935e2549d0a7a05e4395d502502c3d14ea27fa8df105ec0fb794609b12ebbe6afe5d
SSDEEP

3072:06r/oLoL8LMMBonoNgv+waVfbsLzHfeM8hx:twUL8LhqoPwkfbOHfeZh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b471393e068e0f93ac3b6768ff8d5369_JaffaCakes118

Files

b471393e068e0f93ac3b6768ff8d5369_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\ILIR\Desktop\Stealer1111\Copy of WindowsApplication1\WindowsApplication1\obj\Release\Camfrog Font Changer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ttnqcap
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE