dd32b47c624e3a1d50e99da86862447a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd32b47c624e3a1d50e99da86862447a_JaffaCakes118
Size

50KB
MD5

dd32b47c624e3a1d50e99da86862447a
SHA1

e29c371d2030b673384f3eb3622128b1a71cd50f
SHA256

7740ec12fe969cf30e9d96afb39f1e1788689ff55a919d3c8035ba4b983b2f67
SHA512

14c05e8d502d88e95f91cbff6b69eed5e3072deebdf8706310551e60427cfd4419842ed05b0c78b23e4187ffb72f3f1bd20140ec2cd89783769130c799640243
SSDEEP

768:eBjFST01SQlXhMcJjXXNOfi1KkkEOI7NO6:e1iQldNOQkENNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd32b47c624e3a1d50e99da86862447a_JaffaCakes118

Files

dd32b47c624e3a1d50e99da86862447a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ