c81da627cc796e501c87812de0d0edd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c81da627cc796e501c87812de0d0edd6_JaffaCakes118
Size

1.4MB
MD5

c81da627cc796e501c87812de0d0edd6
SHA1

bf4be593bfee476d2da8db4ded5c90426a244f1b
SHA256

0cd2ce995e71db4b61495c518df322df9bcbe1c897bced0bfa88511bf02396f3
SHA512

73713519f1e6fb6364f23b1ed6db1fa902d77083c42058577efdf40eee0185a16d17b19d0fa62e572c9b0539d2917b74f7302fce3da4ec231e1a633b5364ec1f
SSDEEP

24576:dZkPOHsSNgXUEykYVvrEf8RDiynbNQPdqua/3mkK1aT7qewyhsyoc9L:dZkGHszO3vrEfLynBQlquJ71aT2eTb9L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c81da627cc796e501c87812de0d0edd6_JaffaCakes118

Files

c81da627cc796e501c87812de0d0edd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\isaelblais\Mes documents\Downloads\WTF\Binder Example Stub\Binder Example Stub\Binder Example Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ