d9a68a630812ca13fbb4a24e6c19602e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9a68a630812ca13fbb4a24e6c19602e_JaffaCakes118
Size

9KB
MD5

d9a68a630812ca13fbb4a24e6c19602e
SHA1

8b9105cd3cec0e8aaee52a49fe8adc9c5460fc16
SHA256

010d03887d7aed009fbb8dab26adc93b3dd2f2b8ceb710df4d6a257353d02482
SHA512

7d003880fb0c00e9698447688996f50a289c144c83283994673945c503dbfa3677eeffa887e2718c3e9cba435b0cebf9d7309987ad5505fd3731dd77b2fd7571
SSDEEP

192:qBksuHm6N7oy1uIueMZZ3A93Vnjdwqz83DvI120:g4x5ueMEFnhwqATo2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9a68a630812ca13fbb4a24e6c19602e_JaffaCakes118

Files

d9a68a630812ca13fbb4a24e6c19602e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ