jaffacakes118_dodo[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_dodo.exe
Size 60KB
Sample260910-c84ynadm5z
SHA256 1ae90c4df6cbb2a2a0fb08cc6396dfaae4454e3b98aa6a8ccda5b51ed146a5a7
MD5 f436170a5e99ace18cfbb3bd67575cce
SHA1 f0033b1424b11862a8e33b3c4e218069982fc72b
SHA512 f7f83512a4771d488b50ec5f6509fc8b1d1c435c85ed04db7d1791f253820b3ee779738aaa2069c75870a4982e8cf19fcc2e9bdc503003e3933bb01cedbc3f7a
SSDEEP 384:btwVLZdtvlWeT8ykL0qhJIJw4n1bI1gmwSoGVKjvvayfJ1wQfBX4l/PQ9Z5C:bOLZd6yi0/7WEDTJ1hBoZPQ9
TLSH
T14753B75A7B9570FBD5B6C13E8AD62335B6B070B013224BCB500849796F62AF83D7D788
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_dodo.exe

File Explorer

jaffacakes118_dodo.exe

.exe 60KB

jaffacakes118_dodo.exe

IMPHASH 04ec74b53750063212aa61296042395d
SHA256 1ae90c4df6cbb2a2a0fb08cc6396dfaae4454e3b98aa6a8ccda5b51ed146a5a7
MD5 f436170a5e99ace18cfbb3bd67575cce
SHA1 f0033b1424b11862a8e33b3c4e218069982fc72b
SHA512 f7f83512a4771d488b50ec5f6509fc8b1d1c435c85ed04db7d1791f253820b3ee779738aaa2069c75870a4982e8cf19fcc2e9bdc503003e3933bb01cedbc3f7a
SSDEEP 384:btwVLZdtvlWeT8ykL0qhJIJw4n1bI1gmwSoGVKjvvayfJ1wQfBX4l/PQ9Z5C:bOLZd6yi0/7WEDTJ1hBoZPQ9
TLSH
T14753B75A7B9570FBD5B6C13E8AD62335B6B070B013224BCB500849796F62AF83D7D788
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70242

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\0xhunter\Downloads\ISR\Bypass\dodo\x64\Debug\dodo.pdb

vcruntime140d

__vcrt_LoadLibraryExW __vcrt_GetModuleHandleW __vcrt_GetModuleFileNameW __C_specific_handler_noexcept __current_exception_context __current_exception __std_type_info_destroy_list __C_specific_handler memcpy

ucrtbased

terminate strcpy_s strcat_s __stdio_common_vsprintf_s _wmakepath_s _wsplitpath_s wcscpy_s _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _seh_filter_dll __p__commode _set_new_mode _configthreadlocale _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _set_fmode _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __setusermatherr _set_app_type _seh_filter_exe _CrtDbgReportW _CrtDbgReport system _crt_at_quick_exit

kernel32

GetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent TerminateProcess GetCurrentProcess GetProcAddress FreeLibrary VirtualQuery GetProcessHeap HeapFree HeapAlloc GetCurrentThreadId WideCharToMultiByte MultiByteToWideChar RaiseException GetModuleHandleW IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

454B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

607B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_dodo.exe

vcruntime140d

ucrtbased

kernel32

generic