ffeff5a742ddba4163583a7d3df3ae33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffeff5a742ddba4163583a7d3df3ae33_JaffaCakes118
Size

952KB
MD5

ffeff5a742ddba4163583a7d3df3ae33
SHA1

b74e1ee62e17b7ce8e97d022a4e3609fd8d75b39
SHA256

5af4eb06a42f0edb627719cffb25b31b163ad412a3c740bce3eb31fb113d09ef
SHA512

764bceb7f466b88264436b97d1d76909612518ff67d2dadcf1b30271c986a0c6597550684961749baf1f6e777f6ef066c22696030aa71c43b2bb5c61879849a3
SSDEEP

12288:sMro8Z2XE2BFDO8bbSuun45MbMjVAo/oDCAP3StCXhtvQQqrVXJmhtVcoA:s8o42XEADZGnxb8qtPStCXcQI5EVrA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffeff5a742ddba4163583a7d3df3ae33_JaffaCakes118

Files

ffeff5a742ddba4163583a7d3df3ae33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Admin\Documents\Visual Studio 2010\Projects\Scantime\stub\stub\obj\x86\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 931KB - Virtual size: 936KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ