de4dd3d4f41148ee886d9f47b1c5c6d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de4dd3d4f41148ee886d9f47b1c5c6d4_JaffaCakes118
Size

788KB
MD5

de4dd3d4f41148ee886d9f47b1c5c6d4
SHA1

809b66047f774c3b637448b3bae2edef3832e7d6
SHA256

51920a48e9e781ab44e4897c119ac8d5c67915d4d03b8056cac878b46a2b51f7
SHA512

3b1084e752a2fdc8671e8a2112fae8dc6459083d242d5d6e91119d35bcf1f0773712cbc1fd7d332b290d729817f9904b3a9618890009551d76d3a99cc2611b0e
SSDEEP

24576:8eRsgtXLpnzjE+xgL65WnGTaYzRD4GGdKZRnrABsWDu8:BqgtX1zjEacGTaYzl4rdYnreZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4dd3d4f41148ee886d9f47b1c5c6d4_JaffaCakes118

Files

de4dd3d4f41148ee886d9f47b1c5c6d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\packar\Bureau\Obfuscated\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 757KB - Virtual size: 757KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ