1486ff9be0f0e3eb2ebeb41df94389dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1486ff9be0f0e3eb2ebeb41df94389dc_JaffaCakes118
Size

1.4MB
MD5

1486ff9be0f0e3eb2ebeb41df94389dc
SHA1

d4e9639f3ab372ecd51e69778b3b1ed6fd3b419f
SHA256

64ac62faa07d2d4932394d79f39c69b715782f0768e80dda35372eca8c66772b
SHA512

d4485b0393043e5f4fff5d7eef8023d29072c4d7268c1ec3a6bffdea0b43577261d2b06684ed36c91498fab46eab404a7ade370b977f84e67b2bdf59a8ceee89
SSDEEP

24576:s3wDfTJxCXvb0nmTZu3NzmsCgn9uUpcqBKGa333LAJCL0A6LzXYjWHHUzw:XB4XTnu3HfuUtBjnCQA6LzXYsa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1486ff9be0f0e3eb2ebeb41df94389dc_JaffaCakes118

Files

1486ff9be0f0e3eb2ebeb41df94389dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\TeamCity\buildAgent2\work\6b083a8e6fa9422e\src\Nvx.ReDoc.InstallerLauncher\obj\Debug\RDSetup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ