d71fa4a737f03fde44c9106c6093dc76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d71fa4a737f03fde44c9106c6093dc76_JaffaCakes118
Size

137KB
MD5

d71fa4a737f03fde44c9106c6093dc76
SHA1

75e549d27aba3578af50e50af2559c84aa363e68
SHA256

14957ff462540bc6edb74b6f29d6af5c6538a57f1747db0640ba64477d6459ba
SHA512

a065777762c5c46943727fe4bd49a2ffba59b00d77edefc330f45cc98aad8c2262cf694c51d6feafa71c3ae72e2e3925fa2ba39c3f831cef0e5da7650bc41a06
SSDEEP

1536:TymeqFLooKcKOfY9e5BtcOXSD8hL/9GiS0z5cXN1aMge4Q51LnrwivDdHrx3Dse8:OmeqOPiLX/+XRr/xrxTHxP/YeQ+8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d71fa4a737f03fde44c9106c6093dc76_JaffaCakes118

Files

d71fa4a737f03fde44c9106c6093dc76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\James\Desktop\Source Codes and Projects\xStubRC4\xStubRC4\obj\Release\xStubRC4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ