4ddde7020b5127997b50ead23b0a1868_JaffaCakes118 | Triage

Sharing

General

Target

4ddde7020b5127997b50ead23b0a1868_JaffaCakes118
Size

376KB
MD5

4ddde7020b5127997b50ead23b0a1868
SHA1

142fe492983e5fa8352b3b8937c1bfdacf6a2bd6
SHA256

3d66ee66170a11dcb912758e55e1db6ff0d5a4ca464b7c550e962982a355c798
SHA512

c7d92bb88cee7fd5cfb484fdbb9a58f94d045f929c973a53da36c453d53fdfbe8ce0895e05d649cebc6f65ec02016244b16fae907094137be22349a2ce56449d
SSDEEP

6144:iXJ29H1JEGiCxRfUPL76pab2slAdQpgYTpqVgd2A+he0akKfQ1AeS8YjUgzBxp:8JosG7sP364UQj9t3QepkK411S8Hgz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ddde7020b5127997b50ead23b0a1868_JaffaCakes118

Files

4ddde7020b5127997b50ead23b0a1868_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

UF)u%A
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 359KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ