dedd79bcb02ae4cce2de8c9040cf14d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dedd79bcb02ae4cce2de8c9040cf14d9_JaffaCakes118
Size

35KB
MD5

dedd79bcb02ae4cce2de8c9040cf14d9
SHA1

e2e5ee1074af332124c868e43e07c47d72df108c
SHA256

693d609714ce5fc1fdcaab5a7b13fe9b988c87c81c37d4c41b56506345931d44
SHA512

15d5262ca96abc9041b2f75ed3d8e8d2ebc38f85d6356558c7ae6c2ea5165ff4d61f15079d8826c253c2b178d11288e1ab921515e31ef9804f545606a8181d5f
SSDEEP

768:sekMs6aXp2MgjPHriKgsE+zPoghpN7pR+HYH3QD:sLXp2MevGKNAghpN77gD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dedd79bcb02ae4cce2de8c9040cf14d9_JaffaCakes118

Files

dedd79bcb02ae4cce2de8c9040cf14d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

ov 1+
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ