d9fccc0b7ac41281eda0b749908b31b7_JaffaCakes118 | Triage

Sharing

General

Target

d9fccc0b7ac41281eda0b749908b31b7_JaffaCakes118
Size

127KB
MD5

d9fccc0b7ac41281eda0b749908b31b7
SHA1

f2c98a0450889ac9f883958130ed344457ce21fb
SHA256

8e73f3e2774665fa2868e7bd3ef7899f940d67edb68bc8bd05873d2e18e79f39
SHA512

e59c3be819573840a843c69bcc976728bbc97a11794bb2bd2187406d7dd938cc8038fff07dc4d1ea69ae49f57ed67eedd62888264e8109032385c8966e427a2b
SSDEEP

1536:TymeHiV+8U2Y0TakaBLph53QlEOqfxI1nEX7bXRPqmSrYtqTk0zIs9DZ9IN9yT2c:OmeHjosL28sYtgxjdA3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9fccc0b7ac41281eda0b749908b31b7_JaffaCakes118

Files

d9fccc0b7ac41281eda0b749908b31b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\James\Desktop\Source Codes and Projects\xStubRC4\xStubRC4\obj\Release\xStubRC4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ