25114a9f6d48d1fd151e91b1f6d1fc72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25114a9f6d48d1fd151e91b1f6d1fc72_JaffaCakes118
Size

9KB
MD5

25114a9f6d48d1fd151e91b1f6d1fc72
SHA1

70ba46b7d8a3bb205dbacefa261634cf651595c3
SHA256

6ad3b756768468a35212e89c4a75073232b24e26df69b4e59a68e8059e2007a9
SHA512

b11180a018f0f49c755d905875b881481d16544acddb7f726be4de900eab923f3cc98a77cd28d7da2352b35cd85611ddb223b106a9b44da7f9e8532a3f4bbee0
SSDEEP

192:RBksuXEXVwVQCeMZZ3H93VnjdwCzS3Q1Q3B2Bk:nVwCCeMBFnhwCmY9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25114a9f6d48d1fd151e91b1f6d1fc72_JaffaCakes118

Files

25114a9f6d48d1fd151e91b1f6d1fc72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ