4ded49e92be0bddf28f7f59a6cecf408_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ded49e92be0bddf28f7f59a6cecf408_JaffaCakes118
Size

3.9MB
MD5

4ded49e92be0bddf28f7f59a6cecf408
SHA1

5f120465b31232cd93f4fc914408fe9adef84af4
SHA256

debc1f5a55e60a579fa42d188c93060b687fe8a766bf91499e0d2569f3d8a03e
SHA512

656cf510f8e731bd2e08fe053250709db15c2808e09515ae9f4036c60804cce5da6b77e731537f39361d67be1af9d7745dff90d856d9c1e739d246b9a67a5a1a
SSDEEP

49152:0YgsfIwlnVEqmA2GR288optumuA5IrYiT4+9VG7WQdBiZW8S:mgbBVEPA2GR288optumuA5IrYGNWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ded49e92be0bddf28f7f59a6cecf408_JaffaCakes118

Files

4ded49e92be0bddf28f7f59a6cecf408_JaffaCakes118
.exe windows:6 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\mediamall\mm_trunk_xbox\MediaMallServer\bin\Release\MediaMallServer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ