d4378cd131c62e2672cfd6ade6277fd7_JaffaCakes118 | Triage

Sharing

General

Target

d4378cd131c62e2672cfd6ade6277fd7_JaffaCakes118
Size

51KB
MD5

d4378cd131c62e2672cfd6ade6277fd7
SHA1

86950ec397c6e405b5efb51c85bee2196d36c465
SHA256

c0da53973cca170c70613daf9f093b8d84c0dc502d4cc13f4d55de32a250417e
SHA512

b9a75699fd8d0d758199b499776eb69ee62aba3087dafa2395c0b037788601f797529c5b5cac0542eaad5799d649895a5e23f60349827a8260735448c2ec870f
SSDEEP

768:tTnuhBuvRolSFF024bAw285mdNNiCP0cVnyr9Es0VB:xnuhBuvRoSaFcwfm5lfc9E9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4378cd131c62e2672cfd6ade6277fd7_JaffaCakes118

Files

d4378cd131c62e2672cfd6ade6277fd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Dokumente und Einstellungen\admin\Desktop\Coding\VB .NET\BKA_Stealer\Stub\Stub\obj\Release\cgjghgfh.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ