2c2ec72a29222d09080a3edb0918384f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c2ec72a29222d09080a3edb0918384f_JaffaCakes118
Size

4.7MB
MD5

2c2ec72a29222d09080a3edb0918384f
SHA1

ca3143be2033715b51450874e97703775422d711
SHA256

c0f2814e9c66e3bb26b8b6f6e98b17d8ed969dd9ec2b214190e9d63e7c2cb800
SHA512

55d76245d19ce1dc4ff200a0af9a56e85b14beb9322d8e8502af9960e8bd2517fefcd20d7d12bb2bfc2f9cca81305d4e33ffb775c08e126fd87ae36817fdffe7
SSDEEP

98304:2UeuBrIet6LPb03M7ehhtUhWP7qP7Zbms5Fv819KTK2WUxQqZ1SxUeB1JHiLNq:zrIeYP094gPmo4Fwh2WUxQeMxBB1x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c2ec72a29222d09080a3edb0918384f_JaffaCakes118

Files

2c2ec72a29222d09080a3edb0918384f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\RAAHUL\Documents\Visual Studio 2008\Projects\stub\stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ