eb046025e9c605e8e09040e17f995718_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb046025e9c605e8e09040e17f995718_JaffaCakes118
Size

440KB
MD5

eb046025e9c605e8e09040e17f995718
SHA1

d8060a34753441f1b20022198836b372b7eb420a
SHA256

3bb78ab04abf338132dc08f06312fb0d753fe0fceca4dad12b0bf0400324cdb5
SHA512

951b865a71b820aa0e493188928393f4a6f6395db51be6761e03226e62a632e06454feb92df8236a1086b2a031df0037264a62db7d3e20abefe11cd5989827e8
SSDEEP

6144:0kcSLnvUpS4FMaxw5oPG+U4msmGIQf31OfTgrMe18InXoGO8Kk5uHy3Wdb/jOd8q:D7Rnev6sp316UL8InYGeHy3inNMfWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb046025e9c605e8e09040e17f995718_JaffaCakes118

Files

eb046025e9c605e8e09040e17f995718_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Peter\Documents\Visual Studio 2008\Projects\Fjord\Crypter\Stub\Stub\obj\Release\WinFile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ