a7381c71b97441b178abadd50d3463eb_JaffaCakes118 | Triage

Sharing

General

Target

a7381c71b97441b178abadd50d3463eb_JaffaCakes118
Size

429KB
MD5

a7381c71b97441b178abadd50d3463eb
SHA1

c2c38dbcb2842dd89ea2d93bd505fc60b06f85ea
SHA256

a6e534baecc75c265c5a5ed2394485947cd571f431568ae8ff9f014ab6901153
SHA512

8e560e09f99f16bad8511ca56aaba7221f49154d7655632a9339cf8f18525ef190f21cc3a205731cfbbbc155fa4f2f65f9eebf652125f9e24c893db1b0d50846
SSDEEP

12288:zONZ56buQ6ypisAR5uAbnJh0No64ysFcdv:zOf5UR7A7tn0+6fsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7381c71b97441b178abadd50d3463eb_JaffaCakes118

Files

a7381c71b97441b178abadd50d3463eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\user\My Documents\Visual Studio 2008\Projects\nufcrule cryptor stub\nufcrule cryptor stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ