3e642d64c2dc156deae89a6c6b304bf6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e642d64c2dc156deae89a6c6b304bf6_JaffaCakes118
Size

322KB
MD5

3e642d64c2dc156deae89a6c6b304bf6
SHA1

2188ce0ffcd34694983a3675d632277a0d264685
SHA256

77d3ef9b5249b130c6ecc0db0c440bdf021da04b358e5b3fcf4373eaf2149eaf
SHA512

255dc10b66ea7b1ff63ddf56f025956101f63cafd47dcb3758b5f582210a34b86dfb1d1a5811d6c8286eecd56367c08ebfe7c8191fbb36bb71fab17a35fab2be
SSDEEP

6144:sXI1OzcRifAdmb0Zan4l+jMhSxpJoXI1OzcRifAdmb0Zan4l+jMhSxpJt+VwuNxg:sXI1OzcRifAdmb0Zan4l+jMhSxgXI1Ot

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e642d64c2dc156deae89a6c6b304bf6_JaffaCakes118

Files

3e642d64c2dc156deae89a6c6b304bf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Wynston\Desktop\Sk1D W0rm Fixed SOurce\Sk1D w0Rm\Sk1D Worm\Source\Worm Stub\WormStub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ