3dc93b3e5e766735cdc9eff0a3d61778_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dc93b3e5e766735cdc9eff0a3d61778_JaffaCakes118
Size

148KB
MD5

3dc93b3e5e766735cdc9eff0a3d61778
SHA1

878945bc6a7da25cde811be2f777a588c44fd77f
SHA256

d2f3ce7ab0249801c1ef831e137e073b686f6ffa5e230ec575fa5b13bb662ba0
SHA512

57f711dbc40fb68dd3c595b693fe1e208007540039fce36c7b8d72ae1ab2740b4927f22cdeb18c6b9a9996158a770747c9798b13d135178e11f9df79b06d3458
SSDEEP

3072:wzvPDBntt7Gj85qH4oveM/ko1ccfCTR9gjOIA4pW:MtUzYahT1cACTfgjd1A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dc93b3e5e766735cdc9eff0a3d61778_JaffaCakes118

Files

3dc93b3e5e766735cdc9eff0a3d61778_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Admin\AppData\Local\Temp\uvdmr5dk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 99B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ