db38efa3044c3b69500b33b1ea70aa7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db38efa3044c3b69500b33b1ea70aa7c_JaffaCakes118
Size

259KB
MD5

db38efa3044c3b69500b33b1ea70aa7c
SHA1

710bb314841654c4f99bd41827f1e96d57c20e4e
SHA256

7f4a10ad931ac78a7563cb38a8d15db1175a0a9d90b797b51f40acdee514f857
SHA512

49d1ec358ccada26d463c469a45c14cfe61a45de99a5bdf4226caa6a42a9d6dd5f881429a55f3fbba6262f12c56e69b7fdcfcfbe48d29967df5c63aa667c6b27
SSDEEP

6144:sd2GeNVhjVZbCCrVhjVZbCCmIp9sulBFsLNFt8:NHhjLCCJhjLCCmIpLfQNX8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db38efa3044c3b69500b33b1ea70aa7c_JaffaCakes118

Files

db38efa3044c3b69500b33b1ea70aa7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1134\My Documents\Visual Studio 2008\Projects\72389 binder stub\72389 binder stub\obj\Debug\72389 binder stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ