d02ab894cc39367f293676c53b8b2def_JaffaCakes118 | Triage

Sharing

General

Target

d02ab894cc39367f293676c53b8b2def_JaffaCakes118
Size

523KB
MD5

d02ab894cc39367f293676c53b8b2def
SHA1

aae4772ccd86bbcd7b9023d7bcee1d29b8db3951
SHA256

b1cb32b518a8b92d47cfa8f4b1d507303193b3dfd4ec824ed610cf48368c2d8b
SHA512

230199c6801f26e33c34e844ffc0d6233457664ef9003b2bd188db1dc7224cd9dd2d9935d76bc7d89ea793bb4f1f09b20d8dd3a1a6b959df3ea14645346a8c99
SSDEEP

12288:9nb0AvRXphXpxSBEV+lBzV1Y/5f21Q9bKmEXRyuTmS:Rp1p8BESpV60q9AUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d02ab894cc39367f293676c53b8b2def_JaffaCakes118

Files

d02ab894cc39367f293676c53b8b2def_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ