fee35809cf5474367516c36dd9af4886_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fee35809cf5474367516c36dd9af4886_JaffaCakes118
Size

98KB
MD5

fee35809cf5474367516c36dd9af4886
SHA1

e6ea7bcd9c3af539770a030cfab6c9f6db445b9d
SHA256

1e663ffe446548d332f2188b4c027fa22d5a3ee0f90993c65fe40209ac48aa43
SHA512

e7018fdf06d511c710d5f52566e90482c052772456b5654de646adc7ca60c364dbf3e6bd84020d9bc26098765a16ad698e947a903178a47cc8cc441dc1de4a9d
SSDEEP

1536:RAn0oppM4wDXMGpPK+F64dPzAj54xScCJZEPJWNCBaGVPLQ:a1ppM48XMGg+bPeqd0hgBzlLQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fee35809cf5474367516c36dd9af4886_JaffaCakes118

Files

fee35809cf5474367516c36dd9af4886_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\dr zinou\Desktop\Stub WinZino\WinZino\WinZino\obj\Release\system32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ