377b877bc2413adb73eb3c24314c66b8_JaffaCakes118 | Triage

Sharing

General

Target

377b877bc2413adb73eb3c24314c66b8_JaffaCakes118
Size

176KB
MD5

377b877bc2413adb73eb3c24314c66b8
SHA1

b84078dcf5a9b409bd31eed6d2261b96ecd3443e
SHA256

607908acb062aca6d5a608242e061157ae9c6455d3a8086055a37d9c1f0180d5
SHA512

3764eb60920dc2ad2502a4096222100864a45c1070f60897d17091c1a14148287e786db437a4445e258b59b5dee2758c51fc291bb98af7ac0ac989a95e61446c
SSDEEP

1536:OpQeJLuFY7Of+v6fN7OJMWl12qHncTsWjcdapeyU:wFq9flC+WlzZapdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
377b877bc2413adb73eb3c24314c66b8_JaffaCakes118

Files

377b877bc2413adb73eb3c24314c66b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\BuildMasterAgent\_AGTTMP\_E51082\Src\src\Otter.Uninstaller\obj\Release\otteruninstall.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ