d491a097d920ff70949c56373f9caa85_JaffaCakes118 | Triage

Sharing

General

Target

d491a097d920ff70949c56373f9caa85_JaffaCakes118
Size

15KB
MD5

d491a097d920ff70949c56373f9caa85
SHA1

253b0b1cae701ef3b9e2b793f8445d499fa40d11
SHA256

b86f4aa5b87de380528fd62560fd8e9b7ff9cfc862511798f3555a4a13428d2b
SHA512

80c3c95d4aa4375d3167cf0d2df07720c2c559b81052c4e178d365e7c407b29796a73f076fec32fda88a49be1a1ccdc7e0b6c05d88f77ed850fd8fb388c469f0
SSDEEP

192:pnbCdc/Pc/8kdgPn6EMfRXZmYLKnloYU45gJtIhfrhwv8N1BFj:pnbCdciNgPn+5J3Lf458Qfr68Nh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d491a097d920ff70949c56373f9caa85_JaffaCakes118

Files

d491a097d920ff70949c56373f9caa85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\gr33n\My Documents\My Pictures\72389 Binder\72389 binder stub\72389 binder stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ