dfe030bea8ab450de0dafe5c2b255ba9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfe030bea8ab450de0dafe5c2b255ba9_JaffaCakes118
Size

656KB
MD5

dfe030bea8ab450de0dafe5c2b255ba9
SHA1

f0c9c900fcf48bceb63b6741ba92591429b66c8d
SHA256

f8121aac8ac9337cc4fd3faded52b430f1a88762f60e7d7e6090e0eb2a76c1cf
SHA512

6b8a70c68727cbba410f20350ce152b4d6c73833642ea6c09fb9ce89348b558eb0aba3502975f55144b77652ad4eece0493049e230196b6f4db86602eb607060
SSDEEP

12288:G9fFdGJ6M3Wm0dOoawkPLTz1AzhkENzt0Mgtp61DmRx:IfF0ofa5Tz/EFawDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfe030bea8ab450de0dafe5c2b255ba9_JaffaCakes118

Files

dfe030bea8ab450de0dafe5c2b255ba9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\1337\Bureau\1.9.1 src\bb1\bb1\obj\Release\DDhost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ