b5106fa2c28eacd1f5fd0b19fc07cfcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5106fa2c28eacd1f5fd0b19fc07cfcf_JaffaCakes118
Size

40KB
MD5

b5106fa2c28eacd1f5fd0b19fc07cfcf
SHA1

71968f350031ffa9a61d5fe4de2f32dadcdf9614
SHA256

06f80c648ced27b5d71bf4d52073aee169495f3c45bedbd1af5f875d8809a9bd
SHA512

6c10d27279e9ac22a7ebf452562970defb9cda9b1f90d1b0675224c3928a07693e3578b178cf1b6c135a9e625ea3cae6a990ad620b15bd6092755e31064cdda8
SSDEEP

384:Dx382X7L0ETMknLf4YcrQfh9n++8/x9yRftFKLUkU7T/5afdmICAQ7ZVR/YP5EEI:Dx38MmgX+HyRftFL/+mGQ7ZH/YP5DD0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5106fa2c28eacd1f5fd0b19fc07cfcf_JaffaCakes118

Files

b5106fa2c28eacd1f5fd0b19fc07cfcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\user\Desktop\VB.NET\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ