104d57a352031084cbea013cf2348e93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

104d57a352031084cbea013cf2348e93_JaffaCakes118
Size

6.4MB
MD5

104d57a352031084cbea013cf2348e93
SHA1

15a85aec2ef1f9c2a923baff33f38c34e37e614a
SHA256

ad4be77b670149ac0ce2b7e6a13bd394275466ab2ba783d632e21e8ea0ec8660
SHA512

0d0cc5cfc1f3e45255d23a951ebc19db44ecd96e5eb58d8ce6d3e505b5e7b8921c892f3537065e742b6c68a92534ca270da2f23d552b50893040d86d25b3cd3f
SSDEEP

98304:PuC1g5AUd2BiH3SdPVNHTlME9BbfFNpv/s8PQpsf7lrxWW3kEAOjkj6YiwOBpIeF:PXmFHiHNyEzBNR/s8KsNmekjHi1zwyh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104d57a352031084cbea013cf2348e93_JaffaCakes118

Files

104d57a352031084cbea013cf2348e93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Work\ZIP\ZipArchive-Git\unpacker\unpackerHTML\obj\Release\djlnbdjnbrjnbrbn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ