bff16109db65192d6e3fff0cebb1fa5e_JaffaCakes118 | Triage

Sharing

General

Target

bff16109db65192d6e3fff0cebb1fa5e_JaffaCakes118
Size

488KB
MD5

bff16109db65192d6e3fff0cebb1fa5e
SHA1

a75c7bcb37fcca2d33604fd7356dbd983b38e586
SHA256

7ae95e4755b985d74dea31bf4c7e8e4d9dc825c358c3b4ec55882ed7ac206538
SHA512

fa03aa08a54590b2b7d712d8c745a6969b94fb83093fa6ba7ba5b1b38a7b95ed0e7eaed4b9edbb68a35a6414e9943d9b989f73b95381fade486501911d23fe07
SSDEEP

12288:rUlqSgqhJvfke4HU5K+Dy6lSC8u8yN0sqpwRc+EPW2Oh:rq9RvQqu6lSIjNlqFfe26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff16109db65192d6e3fff0cebb1fa5e_JaffaCakes118

Files

bff16109db65192d6e3fff0cebb1fa5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Haithem\Desktop\Stub\Stub\obj\x86\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ