JaffaCakes118_6d5ee70fad22d6b4ab7c1bc462e79670 | Triage

Sharing

General

Target

JaffaCakes118_6d5ee70fad22d6b4ab7c1bc462e79670
Size

179KB
MD5

6d5ee70fad22d6b4ab7c1bc462e79670
SHA1

f4ac06aa219cb4b97e480e83a1b069f3e8408608
SHA256

c76495023894a45401ea163bde2bc84fb8d980d5863b83b42399a7ad627c0db5
SHA512

da99968236b176d78c7d8ac3505f58b4ee3bdcfc9ba4aa040616a9797e7d7ee52abe8eee0f09da7150637591605d19b79fead27d9d30ede50d44c9f001dd2c19
SSDEEP

3072:JPzVfsNDKRtnYXGCRCoyx4wnExKMrZMsqZJbbsqQRnpA0UJU3FtWWHfvEaSf/iUc:dzVfsNORvRonwnMvq2RndEkwFajGW3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ddoser.exe

Files

JaffaCakes118_6d5ee70fad22d6b4ab7c1bc462e79670
.zip
ddoser.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ