dad6e2db8430773d5a8358681142aa0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dad6e2db8430773d5a8358681142aa0b_JaffaCakes118
Size

275KB
MD5

dad6e2db8430773d5a8358681142aa0b
SHA1

de1350714e87b1a8fe2517e5dc742d30de367123
SHA256

264d9751f9c94a98f2710307130ae4e227dce6ed1a0533630e0cf40e02a55190
SHA512

3e292c0eb018f97c53854f19e5a5504ad3c0bd9c9c3f4818ad71d7710a297cae21fca8fec26c5493d34df4f9989adc73a1c1aa0dbb17ba270d1ff28cb56f83bb
SSDEEP

3072:5C6xV3mGnO927SE9oGmh7Qm+p/zwsijd8BfiKU:x8bs74hQpbdijdb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dad6e2db8430773d5a8358681142aa0b_JaffaCakes118

Files

dad6e2db8430773d5a8358681142aa0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FEDERIKO\Desktop\Source-DL\stub\KBHook\obj\Release\Adobe PDF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ