363311530bca38c6d8bf46c8f2cc5212_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

363311530bca38c6d8bf46c8f2cc5212_JaffaCakes118
Size

586KB
MD5

363311530bca38c6d8bf46c8f2cc5212
SHA1

669a0c6189dc60872c810d40c0d0a4a3d39f06dc
SHA256

21e2e31722c3162154ebd192470183afeeea2c1dfabf77e369cbf5a257802fdd
SHA512

49e1b1ab862bcb715b26f230c8a3643f2350748024618fa31adb405ea00b3eab01af7505aeea3740708345c14dbb933fa9cd5d68408e7ac4f94458f366ee522c
SSDEEP

12288:n9fFl6iOp5stKi/CYqICxr0BnVIPm1/rF/UhoNieeAssK7slSX:9fFvVKi/CXICx0+m1B/eoNieerX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
363311530bca38c6d8bf46c8f2cc5212_JaffaCakes118

Files

363311530bca38c6d8bf46c8f2cc5212_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\1.9.1 src\bb1\bb1\obj\Release\DDhost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 548KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ