b8e8cc89ad4059029f04d6280d909c8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8e8cc89ad4059029f04d6280d909c8b_JaffaCakes118
Size

178KB
MD5

b8e8cc89ad4059029f04d6280d909c8b
SHA1

1afd3f8a0e425a8bb18e0ad1f2d6ffef9a287179
SHA256

8bfa1415c4208c7780904aea74c5e82167c38c3a8e49b0e237f9b3dd5acdcf6a
SHA512

251f6c68a3efa9976df827ffacf3eff008f3660f38a7ac0c2df3eda6f657907d50053c5d825d17e1b405147c930e38a39c6876fa825caf8e7e88cad8b3f38ed4
SSDEEP

1536:kjHWUBjVLTfo9sUKFCBy2uvl/0yBVBwU0yHp3JJWKucqfpicwQpRqSF2oU:kjtj5TNd6mF0yHBVdJx+icw+RU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e8cc89ad4059029f04d6280d909c8b_JaffaCakes118

Files

b8e8cc89ad4059029f04d6280d909c8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Users\Megatron\Documents\Visual Studio 2008\Projects\EmissaryStub\EmissaryStub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ