dd29d4e9c2b231c2fb8ce5713741f9a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd29d4e9c2b231c2fb8ce5713741f9a4_JaffaCakes118
Size

5.8MB
MD5

dd29d4e9c2b231c2fb8ce5713741f9a4
SHA1

4b35551f6c83fed72339a56d27118c0cfbb53bba
SHA256

19c74cf6fca1a0e555215564671e4bec4b4ec973f45b785f7b13104df6a8189b
SHA512

8321204825e995272e2b8ec47fd93dbc7fad4c6f65c7945e6614cb270a70ca4405ec4637b66b9e0ff9dfcc616efad9bc534f2f548536519e1e8635b8501082a6
SSDEEP

49152:n1zxMQg3Q3cX5C/wnvdAlPjcmYeuc8gFdbkLUtJd4Bg1S1Cq1YRidsYs+Tr14j7:18LA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd29d4e9c2b231c2fb8ce5713741f9a4_JaffaCakes118

Files

dd29d4e9c2b231c2fb8ce5713741f9a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ