fbdd29c19fc0198c2a4ee3fd60af2998_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbdd29c19fc0198c2a4ee3fd60af2998_JaffaCakes118
Size

18KB
MD5

fbdd29c19fc0198c2a4ee3fd60af2998
SHA1

2d67a63346d5a5f94399cc5082d6ccb89c6eed15
SHA256

8912991a319317e1e4822f227279e3ec42c5ecd0db175ff1026fcc8184efb7ce
SHA512

0a5c71d22a7fd63cf56a84f7526528c0887933b6f46154b0e1290c7da56cb9eacd308d1074aec3e0ea713606e10a77d0420461505f3ffaada95920ebf53fe0fd
SSDEEP

384:rdWfjXjHVCWP/Ft+k7Lf45so4OQfrw8+3wB:rdW7rVLnTj/lo46wB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbdd29c19fc0198c2a4ee3fd60af2998_JaffaCakes118

Files

fbdd29c19fc0198c2a4ee3fd60af2998_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Local Settings\Application Data\Temporary Projects\stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ