dd182685d6353219f266cbe9930bb9c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd182685d6353219f266cbe9930bb9c7_JaffaCakes118
Size

9KB
MD5

dd182685d6353219f266cbe9930bb9c7
SHA1

b6a86ab3a55f2891ce4fc7eca8ffe8bf2155c044
SHA256

e10c60fe842d4ea261a826bcf0e318d2e9f9f4ff1ec94200e4737c0d07642827
SHA512

6fb23a7dcd39c8e73d10f990b396991f73561adedcafe4ff37df36273e045dabf93003a2441dbb5db1ff3efc123c5f2d5d9eea2be82553816f1375679082b2fa
SSDEEP

192:WTBksufPY82gQv5F40tteMZZ3a93VnjdwCzl3ygthv:Wl82l40tteM2FnhwCZCgh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd182685d6353219f266cbe9930bb9c7_JaffaCakes118

Files

dd182685d6353219f266cbe9930bb9c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ