ca7833cc87497334a8a42c3bcfeb67d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca7833cc87497334a8a42c3bcfeb67d0_JaffaCakes118
Size

645KB
MD5

ca7833cc87497334a8a42c3bcfeb67d0
SHA1

a6828fdda37ca547ca10ed8b6c5f3e185b0cb93d
SHA256

fc02516960b3d60605dc082d3742e3ba76db1ad89ad78c1a75ff9cebd37e237f
SHA512

2b03dcf57f6600681221bca6a7ae92631b54eea16c17fff7fe046004cae2e840c3593d130781a709b730d4188c4d66fc7cf5f296bd1715de0767e635ef492e02
SSDEEP

12288:Q+Mf0SbLa9DT7OEBUhbA09svLAKIO8NB7sLOyGr:Wf0SbgTBobA09yAKX8Ne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca7833cc87497334a8a42c3bcfeb67d0_JaffaCakes118

Files

ca7833cc87497334a8a42c3bcfeb67d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 470KB - Virtual size: 469KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ