eb53504b068730ec1b544491a97ba63d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb53504b068730ec1b544491a97ba63d_JaffaCakes118
Size

232KB
MD5

eb53504b068730ec1b544491a97ba63d
SHA1

1482ddd9f546565a7ac66c372f2d62b90445baca
SHA256

179e6fc683d847b3ef431a52a9a4d2a0753e875dbc038fcde29f1486b509df2b
SHA512

43c37f4f062689947161c33c37c5bb1464c8918b2d626055a793fa46e72f9e5c2fc70bb7303026f387a3a561e9d3da3eabe6c5ddd6eb0d4259137629cfa04969
SSDEEP

3072:klL7i6lL7ifXRMCROuKx+B8ba4tQxglOvd6qWj4EqqDaxZss0mEHUIpQZh9h45VQ:QFkRSzMQtQJ6qqLLDMdWnpQZh9h4sC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb53504b068730ec1b544491a97ba63d_JaffaCakes118

Files

eb53504b068730ec1b544491a97ba63d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\packar\Mes documents\Visual Studio 2008\Projects\Stub2\Stub2\obj\Debug\Stub2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ