ddcc7de3ae571a4697cc9afa1f3171a2_JaffaCakes118 | Triage

Sharing

General

Target

ddcc7de3ae571a4697cc9afa1f3171a2_JaffaCakes118
Size

666KB
MD5

ddcc7de3ae571a4697cc9afa1f3171a2
SHA1

effa45d487c6b37c1347f8ea1831ef10d6875001
SHA256

63086812e609a232369de2ef86a8b94a89951dc921da724e73c336043533f467
SHA512

e8345b46ae1c4b7fc6c8da37ada285cf36702aba795e676e643ed76c5cdf7a3ca7a183b34541fd6c412c918b53c9b39bb234bbce4db74c4e58b86d9f248c39a9
SSDEEP

12288:a2syU56jl+6mzMW/oxGfj1HjAKCTsRVo7A70VWMsOngo5rCNLuQ/JR:OyYz6mzMWQUfj1HMKCMo7IDLu0R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddcc7de3ae571a4697cc9afa1f3171a2_JaffaCakes118

Files

ddcc7de3ae571a4697cc9afa1f3171a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\thib\AppData\Local\Temporary Projects\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 125B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ