2b9166a4e29964949e4e8bc7aa0809c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b9166a4e29964949e4e8bc7aa0809c3_JaffaCakes118
Size

175KB
MD5

2b9166a4e29964949e4e8bc7aa0809c3
SHA1

2aa29218a09ce251165cd48669987a4d4304c759
SHA256

eab563cacc84a498087e05cd9d5b54c2a34e50030b05ba2e5938d069a4961fee
SHA512

f5af069c462531a54b9c9c6d3da099d247011486791b2153fe0a5e6c91b3ce5f4f34f1e326f37440185eca1138d9aa0f65933128c0bab5b54dbabc2c5e1f9234
SSDEEP

1536:c6XDydkTbfkjSmMfkwm27M3RR08nzwMmZ7gAP7/gyG:c6TmkTQWmHj3R28zwt8AP7YyG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b9166a4e29964949e4e8bc7aa0809c3_JaffaCakes118

Files

2b9166a4e29964949e4e8bc7aa0809c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Soren\Documents\Visual Studio 2008\Projects\yinpublicstub\yinpublicstub\obj\Release\YinStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ