29f5ac72af3cb9c23d7221963ac76900_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29f5ac72af3cb9c23d7221963ac76900_JaffaCakes118
Size

285KB
MD5

29f5ac72af3cb9c23d7221963ac76900
SHA1

70cce208cd499bc033a0e291be36ba0abd2ee3ec
SHA256

dd36dd731ee4ca25e012b62d094a1b7551b7e518bc67d1bce29b7e65620f191d
SHA512

252bb67660c941127161e298dd7825d5db62a116062a73d7944e8a9bdc4268335d9762367ac8d46a032606a36f68c575ce198d1f47a4124de4ac5ad4bd3a6bc0
SSDEEP

6144:tKN7RZ9W4t5QY8bJYefUqY0bhPeam1Dj2cEwBRiY6mXhFFhUPlT:t6P9W4t5QbJqq3bFeam1D6VwBRLF2T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f5ac72af3cb9c23d7221963ac76900_JaffaCakes118

Files

29f5ac72af3cb9c23d7221963ac76900_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

netdde.pdb

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.heb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE