1ff730ffb7c7e87079d469b4b32a4e79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ff730ffb7c7e87079d469b4b32a4e79_JaffaCakes118
Size

969KB
MD5

1ff730ffb7c7e87079d469b4b32a4e79
SHA1

4cce976ba232d46d421d174e94d70e8bb63a0100
SHA256

23e3508796deddb4036050ebd6c90b269b0bff209d9449b97b49e0b0c1429c6b
SHA512

e197fb77542bc8e34d83744e84f378bb4bd40ca69ea56a4998ee312d39aa0f76ab81434cc9cd45dd61a6905c7de8b06cf57190a8f22b9b6b57db4628428b20e3
SSDEEP

12288:m2waz0zUtX12w5M89FF96X0JxQFFsoJIK4Uv/:Lz0zUtT59FF96X0JxQvN4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ff730ffb7c7e87079d469b4b32a4e79_JaffaCakes118

Files

1ff730ffb7c7e87079d469b4b32a4e79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\Target\x86\ship\setuptools\x-none\Flattener.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ