b4dc9c7a40b9b7250e997c4978330998_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4dc9c7a40b9b7250e997c4978330998_JaffaCakes118
Size

775KB
MD5

b4dc9c7a40b9b7250e997c4978330998
SHA1

9eb2ca3c0fb53767f71c75d4a1b57103b87f005d
SHA256

4d9a26b729cbfa10d31480d7009158cd9e9b8bf4eb4bfe3ea2bba064b38359cd
SHA512

d4fa345d2d54a1d1a59859ca261790c2b7bc8bf428d74cf20eae63d86c3a562522b4cd8fcb0cf22349040a5015805dddfc8940316636c35c09c3e5eb7acaabaa
SSDEEP

12288:mC44UefsCu4UefFx4/ruuuu+uuuuuuuruuuuuuuuyFSk7v:NtN3LxjFd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4dc9c7a40b9b7250e997c4978330998_JaffaCakes118

Files

b4dc9c7a40b9b7250e997c4978330998_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\CW\Desktop\FFB_Stub\FFB_Stub\obj\x86\Debug\FFB_Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ