ddd9e12eed36fffb0fdf92ce98761845_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddd9e12eed36fffb0fdf92ce98761845_JaffaCakes118
Size

1.0MB
MD5

ddd9e12eed36fffb0fdf92ce98761845
SHA1

c6b15e233448ce1ade9de93c58a9ad5893689265
SHA256

e3471b3faf8d908cd2b1e3817267cb56323d74d7c02b0927126d1f772a0c3a45
SHA512

1b49a6a0559bdf236709f8e3bf496bfa5355538fd09e19a86e7b28ea5f5f025a02a8cc1cd44870de6af632eb0e13619d4756c042c5207aaaaaef737234ac036b
SSDEEP

12288:cEHO8qhkyGkODa8ZEmn2H4YVjbhOrmvnOQ1MlH5uBQCmITNj:cEY7Ru2nB95j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddd9e12eed36fffb0fdf92ce98761845_JaffaCakes118

Files

ddd9e12eed36fffb0fdf92ce98761845_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1015KB - Virtual size: 1015KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ