df5451133dc06b2951c24f97149933a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df5451133dc06b2951c24f97149933a2_JaffaCakes118
Size

406KB
MD5

df5451133dc06b2951c24f97149933a2
SHA1

a60e880a608db49501c6e9a275eb53895903678a
SHA256

fcc440eb781c12f31735ae18ee02676bb2b7494314bad8026020c63015396358
SHA512

9adc340ef2bc06d17fd4273320d671a30b5fa2398d6ec8d8872b3e9d3656490da603fdd98658abe3ab8b1c891b3874de534af7bf8a9924e913e84cf253d4e5d6
SSDEEP

6144:5kNqSEKExYetxwfFLymoO/Ijl+65QMjtw5+3S0nqIVwaHICZgubtRYlH:5u7Netx+FeO8law/hnqIVRg0gJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df5451133dc06b2951c24f97149933a2_JaffaCakes118

Files

df5451133dc06b2951c24f97149933a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\HADJYOUB\Desktop\2.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ