1692fdcd6985c21e6d4282e828ea2120_JaffaCakes118 | Triage

Sharing

General

Target

1692fdcd6985c21e6d4282e828ea2120_JaffaCakes118
Size

26KB
MD5

1692fdcd6985c21e6d4282e828ea2120
SHA1

3790a192dac31f99b364c5f0e9055c1fe199ca25
SHA256

65c582680889ee7979f4d37b1603992103de229b36f28c748a89e54a73c0a9ec
SHA512

457ed08ed0b7059ba36d07a66e380dbd7db4806225b24a00286e88eb5bf2dd2e8d688af60ac794c7a90b5d18ca47939970165f98a6956e7325171c7607eb9442
SSDEEP

384:FSeCnRcUawz3aRCSusIi05iqwcJL1lU5qB8tZGtyLk2456ZB9XkMI7VUvKXEX8Zj:FS9aUPLaRCSlIF51wq+Vbwr+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1692fdcd6985c21e6d4282e828ea2120_JaffaCakes118

Files

1692fdcd6985c21e6d4282e828ea2120_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Xzibitsebi\documents\visual studio 2010\Projects\Godlike RAT\Stub\obj\x86\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ