dda1105ffbed7b82f032eca4419cffba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dda1105ffbed7b82f032eca4419cffba_JaffaCakes118
Size

485KB
MD5

dda1105ffbed7b82f032eca4419cffba
SHA1

be9c3f553979a4628e7dd566fe1490a142050ce1
SHA256

4165e52ffa20e12a07b6188b5e7344cd6bca2acf71853314a5f1c3dd3ff6eb3c
SHA512

3842a9558a6f6d34d2b789232fcf98c98e478a525b0dd961480fe34eb30cee9739f4be2827e619deccd9b8cbe56fb413eacad92286255867b2d3ef54ecb9fec5
SSDEEP

12288:oYmhJVfxYzom/EIvTr0cK0mhDzq9KkpZGi:9mBx8XEcXmhy9KAZGi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dda1105ffbed7b82f032eca4419cffba_JaffaCakes118

Files

dda1105ffbed7b82f032eca4419cffba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\noss\Desktop\wmpnetvk\wmpnetvk\obj\x86\Release\wmpnetvk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ