d0fd7a1c753510f4a41d0bc6c898871f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0fd7a1c753510f4a41d0bc6c898871f_JaffaCakes118
Size

288KB
MD5

d0fd7a1c753510f4a41d0bc6c898871f
SHA1

9d9c869b7a48669a9de38a3011561ea9ea8d0b08
SHA256

4accb7ee273a4345443a866388f6efeb6ff7b23fdc2b11bf4a8de87cbe069afd
SHA512

bff67950d6fb7e27b91d101627b42cc4da9a1962a8591f72ddfa6eb370a47a2ea61723683deb19e2d2e3b7fafe21138257d1d492f90adf0f007e266fd0683883
SSDEEP

6144:bWM8Zpqxp4meibqI59PpOPf201/z7pavBE:yMpxp4meibqI59Pk2cb7pavm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0fd7a1c753510f4a41d0bc6c898871f_JaffaCakes118

Files

d0fd7a1c753510f4a41d0bc6c898871f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hgfjhn5445.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ