bf28535e08d561d343cf83dba4e139ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf28535e08d561d343cf83dba4e139ad_JaffaCakes118
Size

465KB
MD5

bf28535e08d561d343cf83dba4e139ad
SHA1

0e04aea64cdbc3cbd800e5f0e8497f8133309e0f
SHA256

302eccc7e536f040941006251f982d740b74ba832db1eea0179b64fb8a0715f3
SHA512

81636cc2fee90608cb904a3d5740f8f05740878ef22c545c200f5cf9cf6bd6c14bf5fe6783ab710d900f54ac30a96955ba8c4b8314b7ba584fcf497d8de0fadc
SSDEEP

3072:h+c1ITy+aLV2ozGgsmxIHjwgSAE6BMjKXLT9WI:YsIraLSgrIHsgay3gI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf28535e08d561d343cf83dba4e139ad_JaffaCakes118

Files

bf28535e08d561d343cf83dba4e139ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Si\Desktop\Snap\sStub\sStub\obj\x86\Release\HijackThis.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 427KB - Virtual size: 427KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ