JaffaCakes118_6a9388e7d70e460e4c4fb99c3a9ffc37 | Triage

Sharing

General

Target

JaffaCakes118_6a9388e7d70e460e4c4fb99c3a9ffc37
Size

250KB
MD5

6a9388e7d70e460e4c4fb99c3a9ffc37
SHA1

71628bd8d8499472ed808a66819d284bf5b8ae49
SHA256

3e776d11b420660ffbbe73f18affe85e09c70914dd55b56b8088bf707ba58cbd
SHA512

a74cffedf367c28f1f6f5e062d5fdad43b2617c47046f3aa58fb13cbb060ac75c7ee80e2fcc467344d8629676889ebf31587f3077853ea5464ecb6e2aef6e90b
SSDEEP

3072:dsyONZz0y6eZkGkBeLkeos8kXV6ndv3lxD7KyALWAHXDpuadxfaWrchw:dsyONZF2GMFkloN3lx36X5Jew

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6a9388e7d70e460e4c4fb99c3a9ffc37

Files

JaffaCakes118_6a9388e7d70e460e4c4fb99c3a9ffc37
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\user\My Documents\Visual Studio 2008\Projects\nufcrule cryptor stub\nufcrule cryptor stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ