db8fe5b46f1c73536b275b9f6745b221_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db8fe5b46f1c73536b275b9f6745b221_JaffaCakes118
Size

318KB
MD5

db8fe5b46f1c73536b275b9f6745b221
SHA1

85a2ea5bea5bb0f202a8625a97077c49fe3406d1
SHA256

38459abae934b00a3a289a6d3d375b30225de96ff5cf4aa25b8d0d1ef2589ed7
SHA512

524c020070f271c978662e6d32e7bfd4a0933134a45c0567c6bd384c031aabd93a309ebe7c5b0983ffec2229fcafc6f63e73aafbedbceac3936722ae294df1aa
SSDEEP

6144:7Jwd99lo9yut4ssF0vzbvshlMyaWmMWRPcflb0S/H:Nwd99Oyum/+vMhmLPvo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db8fe5b46f1c73536b275b9f6745b221_JaffaCakes118

Files

db8fe5b46f1c73536b275b9f6745b221_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Vaibhav\my documents\visual studio 2010\Projects\MyStub\MyStub\obj\x86\Debug\MyStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ