df356c9d34b6557f014e7503a8531659_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df356c9d34b6557f014e7503a8531659_JaffaCakes118
Size

98KB
MD5

df356c9d34b6557f014e7503a8531659
SHA1

8753400acdf2837fdb528ed5baa2ed23eb71a283
SHA256

1eceb1680aae71fcce6f138ec39c8cdc448d38ba8c60cc33cb6450be21ee087a
SHA512

865783a039ec3c4806c73da7a49aa6b69a7ef0b41e0c6e058312dae83b003a650d4a90d5d77cbb0280aba5fa44206aaa46806ea20053871a16d76e269f2b320d
SSDEEP

3072:R8Vu/YZyzc92XgBSrEFePoJCDMtTUdDig1gBEGG494WTv95L:iVu/YZyzc92XgBSrEFePoJCDMt0DbC95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df356c9d34b6557f014e7503a8531659_JaffaCakes118

Files

df356c9d34b6557f014e7503a8531659_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Stas\Documents\Visual Studio 2008\Projects\spreader stub\spreader stub\obj\Release\Steam.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ