edd02d993d27c3313fab0b8d653ed71e_JaffaCakes118 | Triage

Sharing

General

Target

edd02d993d27c3313fab0b8d653ed71e_JaffaCakes118
Size

525KB
MD5

edd02d993d27c3313fab0b8d653ed71e
SHA1

fddd700ec6f2bc1d3812d0f3f2b8f9100abb2388
SHA256

ef835ee3813bdcd035d983800ccfb12571b35423581d3941e0b0f562378930b1
SHA512

33b0d0e0b706d56ad8ea45e23cca2801d89814190302127e48ebf4a91025ac1f160fa078e001118631e81a42f4e1200ed12c02e0cf12a3fbff82fb054e35703f
SSDEEP

12288:TAl76x5mSJzuCzUD3wyzlUP3meoeTbeAEjK:TAIVuCzU0yzuseTSP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edd02d993d27c3313fab0b8d653ed71e_JaffaCakes118

Files

edd02d993d27c3313fab0b8d653ed71e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Current Crypters\2012\service\service\obj\x86\Release\service.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 486KB - Virtual size: 486KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ