ddadcb7987fe4f6b96e9d2e87756e339_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddadcb7987fe4f6b96e9d2e87756e339_JaffaCakes118
Size

143KB
MD5

ddadcb7987fe4f6b96e9d2e87756e339
SHA1

190fc2d4ab92ce3003a21f4e582f05746bed6cc0
SHA256

ab2840bb905c54f34b976d0e672834e728e17cf2232574770a25290525f80b4e
SHA512

c0eabbaaf8d20f46c154d534ac9ed49c715a86876f61b686a6a9d3132382e62fc59d520b19ec5c6b9ca88c506b55c889f7b6d0728acc16a72391964fe6ab2580
SSDEEP

3072:c3CF2sJNhRF2sJNhPF2sJNhnTV3rB6oBo0ve/oeHWF2sJNhWz6oQ:M2FDnZM/z6S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddadcb7987fe4f6b96e9d2e87756e339_JaffaCakes118

Files

ddadcb7987fe4f6b96e9d2e87756e339_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ