048e91d9c724752cfecb5908a4d92897_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

048e91d9c724752cfecb5908a4d92897_JaffaCakes118
Size

678KB
MD5

048e91d9c724752cfecb5908a4d92897
SHA1

6a0bdf3140c9711749e94787d02d6350ee442410
SHA256

d379734ef8cefb03562fe460e53fbce8bd383663a6589f4e41c5815660a89639
SHA512

4eb29cb5217eee3bb3c537630a183e989aa5d3ae3ff152681b2f5b8734b26f5bbbc7789cef10743b08182547da840e0923818c579c925e95a7dbbc2ab3692b09
SSDEEP

12288:XvuauVEYlR4+0rb3L4PbNI9MecKK97YgUcR75fsYOJhScmz:vG/RKrYPb7ecRYgddU4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048e91d9c724752cfecb5908a4d92897_JaffaCakes118

Files

048e91d9c724752cfecb5908a4d92897_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Owned\AppData\Local\Temporary Projects\stub\obj\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ