dd5884e567070b1c93b68c11452fa5f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd5884e567070b1c93b68c11452fa5f8_JaffaCakes118
Size

784KB
MD5

dd5884e567070b1c93b68c11452fa5f8
SHA1

e43d8d38c54e4224454ca868806dc783c7359a59
SHA256

535df62157eba2a32d619a65a5a6c89a219e7560025f2baff6f62b53d6ce4846
SHA512

2ae6e78db3de451b31557f8aaf64d43b86077877c1a664ba2a2d12a145bf4f742285276509b9720a3a36dc4d77153bb8401a34853d60aedf3084d68d61853581
SSDEEP

24576:g0hkEnLiEBza1Vb2H/5vLNPcwcCxOE6d8:g8LiE9jHh8CP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd5884e567070b1c93b68c11452fa5f8_JaffaCakes118

Files

dd5884e567070b1c93b68c11452fa5f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ