c22872073bd482e8cbfc0cf99483f370_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c22872073bd482e8cbfc0cf99483f370_JaffaCakes118
Size

619KB
MD5

c22872073bd482e8cbfc0cf99483f370
SHA1

6cd3d17675b2db89f3fb7cd6ca652fde1a370c02
SHA256

5a46ee1cc71f30d9c962b24ebd6c73661de605d0f83f319f49ebf6602d5b4f1b
SHA512

84a13a7c40bf147d8b414c7d3941bcf4738fabd4b87e1ef14ca87ee679b25f68ea4fb5e216820b055757d225aa1223c537e5317bdc088e35a22cf674b7bdde5c
SSDEEP

12288:ZOSWPkYSBB4eFfTBnhtjRRMkz1SWu6kcM/8ms91op:ZZWP6BBJZBnvjTz1M3cM8I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c22872073bd482e8cbfc0cf99483f370_JaffaCakes118

Files

c22872073bd482e8cbfc0cf99483f370_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ