1ac476181045ea9e8dbba93da5fbc705_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ac476181045ea9e8dbba93da5fbc705_JaffaCakes118
Size

536KB
MD5

1ac476181045ea9e8dbba93da5fbc705
SHA1

192d6818bc696109442422703a2d1556a53ca9da
SHA256

83e391424a0bdf6e27921ff0c68a21f84e4ce18ab55e515aa390eb9ba1b75693
SHA512

7b2f8844d7b27022eee88e39080ff9a78b30b764a78fc206357951efe82d525a69f3803a3709b199a1da4d8585cdd8419cd35c34bb6b50e73fc18c193edd2768
SSDEEP

6144:89HH2J+iFyJEgrErkEJdCNOV5AVAOuD7dfgik2ZWU3DTUPdxW9o:SWJxFoEiCdEOVqY77doUTTEW9o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac476181045ea9e8dbba93da5fbc705_JaffaCakes118

Files

1ac476181045ea9e8dbba93da5fbc705_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Byte Crypter v2\Doddy\Doddy\obj\x86\Release\coddy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 483KB - Virtual size: 482KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ