dcd7b19692f07bf40f2a19dd7a1db96e_JaffaCakes118 | Triage

Sharing

General

Target

dcd7b19692f07bf40f2a19dd7a1db96e_JaffaCakes118
Size

3.5MB
MD5

dcd7b19692f07bf40f2a19dd7a1db96e
SHA1

c14913455eaf6e87313080e07ecabf02f97faae5
SHA256

7f3ac97bd66c1fd72b60cfcdaae1ed9ecd54bf90b8c6f8b41bf9a2e54f5b50f4
SHA512

e498372228f463d9e633877e699ee5ca3a936f00da3dd5b22322e1394520e45bbf5bbb76654ee26c616d29d66dd68d0c9cc51ddc532888b6e6e49b9661aba0f4
SSDEEP

98304:bB2Ue1eUyC0pEbV31BP18GM2aZm1M8ChJ:b0UmvZhFF18x1ZmBC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcd7b19692f07bf40f2a19dd7a1db96e_JaffaCakes118

Files

dcd7b19692f07bf40f2a19dd7a1db96e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ