d091b52256537e80e25c3f59918bf605_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d091b52256537e80e25c3f59918bf605_JaffaCakes118
Size

425KB
MD5

d091b52256537e80e25c3f59918bf605
SHA1

e11c107fc1db49c3507f82a4cda09152933f1660
SHA256

e8bc8d3153a2c062963162ee1692fa67d84ddbb28bb4accc2673a99315f3068c
SHA512

9b103b91dbb1092ac524cb76455d50fd32e24634e85d79a64fd28a232f7c504f2b63996449bf4940676d6ae9ba37dd6b3976a6ac2945678fbc637d52afccdfa5
SSDEEP

6144:JI61tMScs76ULiT5Cdj3/eaktefTHWC4IHCJ+CbcJWbVHPhQBBH37hiDMI:JI6366oa68bHXdycEjQr370DM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d091b52256537e80e25c3f59918bf605_JaffaCakes118

Files

d091b52256537e80e25c3f59918bf605_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ