JaffaCakes118_69cc617fef29c0a1e882cc41bb193548 | Triage

Sharing

General

Target

JaffaCakes118_69cc617fef29c0a1e882cc41bb193548
Size

1.1MB
MD5

69cc617fef29c0a1e882cc41bb193548
SHA1

9c33a92364491d9604a66362c7ae20299b3a7cdf
SHA256

18fe2153f5dc3550d3e8e4d6196cc2379df48b40b0573b2e8361a0163c736005
SHA512

18885e876690c1e61eef968ddbb954e6d597f70d11caad7f7dea268212d9f0ec30b192559e13989525977e63112634a361a71b9504524c835049ecce07ee4c42
SSDEEP

12288:kpU9b5pYXaiD893Y3GliEB+VF1R89Q9Xxr/v/tF0ZS/iGDnl724MIc5JOa0EFmDj:N9b43C3laV1n7qeryMsRVWQf7QTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_69cc617fef29c0a1e882cc41bb193548

Files

JaffaCakes118_69cc617fef29c0a1e882cc41bb193548
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Roshan\Documents\Visual Studio 2010\Projects\ChrmStub4.4\ChrmStub4.4\obj\x86\Debug\ChrmStub4.4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ