ef286a7d02d5d2a95e9c1bec047e8b20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef286a7d02d5d2a95e9c1bec047e8b20_JaffaCakes118
Size

1.1MB
MD5

ef286a7d02d5d2a95e9c1bec047e8b20
SHA1

1b5fa16409462a579d1a57872e5ba786badf10b6
SHA256

e82d810bf4a2757179d5abaff3e1bbe49c4632178d5c3c73fffc368448ec8e9b
SHA512

5c5bc1e53a08b53278b9ac88d4eb0c252ef5fcbabe5f909a4dbe63b7102660b3dd2a4c9fb76684e092945b15b6a0e0af2bfa5519b9a5cfc5d5c4fcab91408405
SSDEEP

24576:ifCdJnvvcziWvpf5p0Gn31FRFvKAWoDWGo03OFwytP2chtworJP/pqE1N:iEJn3si9GFb9KyPbq2ODrFAE1N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef286a7d02d5d2a95e9c1bec047e8b20_JaffaCakes118

Files

ef286a7d02d5d2a95e9c1bec047e8b20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1134\My Documents\Visual Studio 2008\Projects\72389 binder stub\72389 binder stub\obj\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ