0fe6f10327e0b037c32bfab1d8d9e5c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fe6f10327e0b037c32bfab1d8d9e5c0_JaffaCakes118
Size

104KB
MD5

0fe6f10327e0b037c32bfab1d8d9e5c0
SHA1

42f331c2d738993084e5bda5918828090af204b4
SHA256

63b2cce2c6400a873ff05b2c8f2dafe32b29fb90de1611173c13f896aa145431
SHA512

5c2071d0b0ce003c703a9fa6933c9639ac22073a80cb4d1361a35c46ace3493c8264ca23062fd7f403de6e1d3a1e4693b159142175904b07f8f5c5f8569cf280
SSDEEP

1536:6GvWT2fnh4kPUikwO4HJXKm2rMExPnEenxkq1tL+IG87TjAzd9vVsY/:6GOT2vh4kPaEX2ZxPndnlR+I527NsY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fe6f10327e0b037c32bfab1d8d9e5c0_JaffaCakes118

Files

0fe6f10327e0b037c32bfab1d8d9e5c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Work\AppData\Local\Temporary Projects\Stub\obj\x86\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ