d9e435510119f107d23996b4a71de337_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9e435510119f107d23996b4a71de337_JaffaCakes118
Size

368KB
MD5

d9e435510119f107d23996b4a71de337
SHA1

5827cec5f7274f89fc9cf59b58ce51ad551fee0e
SHA256

ae571e2b14b6d470f7bf17fdc88a04f49cc01e68f043ee89a62bd00870c6c1da
SHA512

06f656f8ed6f22488cf61838a9962663006bedd63e311bcad3c574be6ebe9bba6e73ca075a14d5f2f33292ccc6eb3d6c0958f4a6de24260557efdb452b1f4ccd
SSDEEP

6144:vD9OCXrt+XyDWgQE4jVbGk7GvSg3n8d0/l5YFtNF:BOCbt+eQzf7ng38d0/l5sF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9e435510119f107d23996b4a71de337_JaffaCakes118

Files

d9e435510119f107d23996b4a71de337_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Neo\Desktop\fd.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 356KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ