0f957bb28491210a89e93c2280ffad22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f957bb28491210a89e93c2280ffad22_JaffaCakes118
Size

147KB
MD5

0f957bb28491210a89e93c2280ffad22
SHA1

d1fbab933f14d056c1b05a88d4ab3ab41ba25673
SHA256

60b700143002e479488f9f590fbc7bb559068221cf8456c6cea1a6ebb39af50d
SHA512

5c2b4a69913245c7ce926c2c5d141917f20dab239fd3e7618793013bd31c1de4242b5eacfb1f1d9f40ed189980dbedc539e9857823064bc1529431b20e1d841f
SSDEEP

1536:fOZuZF3NZH58skIlucPGbptt7ts7i/jVHS6Nu0Eh08fx0SM7tOF61iYagRn5gHMH:fcU5bHlwbpn7K2b5SZk97NJR2HMGwcY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f957bb28491210a89e93c2280ffad22_JaffaCakes118

Files

0f957bb28491210a89e93c2280ffad22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

mscoree

_CorExeMain

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ