ded9770d3dc72897732f0e918124ce88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded9770d3dc72897732f0e918124ce88_JaffaCakes118
Size

628KB
MD5

ded9770d3dc72897732f0e918124ce88
SHA1

6eaf9f4e1663b00d4a5018c99665c436828abbb8
SHA256

ae945b72d3cf4d6c2caee7f56bd63396bc9dfae056b816fd974dca6b4d3b2ae4
SHA512

479b84364e526f9444ce1ec95888d8bf91a7d833f12d67366561bdf331e682dc69df0a362734c4219ef43a265a443ebf12d0a7038addf95a205099d2b9dc8378
SSDEEP

12288:kMLjsUUreAbIrpyNPlE7FeqUh27vVAjadD9Zt6bXgcxtRSB:k6jaePQlENsPjadD9j6bXh3cB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded9770d3dc72897732f0e918124ce88_JaffaCakes118

Files

ded9770d3dc72897732f0e918124ce88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ