826b26fdf13221821cc396908f644923_JaffaCakes118 | Triage

Sharing

General

Target

826b26fdf13221821cc396908f644923_JaffaCakes118
Size

176KB
MD5

826b26fdf13221821cc396908f644923
SHA1

4082b4e5b5f15eb646710d6bf06101cc3f8a6ce9
SHA256

3ba9ac1a6d0574e8e168a78cbc1b72494d7636bacd3b84cfe693b66021c64bd7
SHA512

020ef99eeb8ba8d31c5020362ed4b5127b032b50a48b64c907d4bc2607722a2a1bb80c88bd8bea9d17dde493fd073a4173e6130989e9c44829260cd12d54b561
SSDEEP

3072:SWJ5CbGcHiqnlMaEmJN1wshWsN3CMG7JqY4+Iw1hkCZ+Q7vzDnqAYg3:K8qnasNyMot4+diS+Q7bDq23

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
826b26fdf13221821cc396908f644923_JaffaCakes118

Files

826b26fdf13221821cc396908f644923_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dervie\Desktop\Azure AiO\kStubnew.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ