db9e907ff9ba826d2060d89960d856c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db9e907ff9ba826d2060d89960d856c4_JaffaCakes118
Size

970KB
MD5

db9e907ff9ba826d2060d89960d856c4
SHA1

f7102a067489427569423393937c5196eb0dd61e
SHA256

6b283788926bb1299ebd19f0ca9326e7f9385d9c45165bf9344a8fdb4bedcc75
SHA512

8aea86d6ce062a2b85319ce175a84502376ebd82619d4eba2a6ba2bcc9e42b4fca35bfb657cebe9b9866f798cb337f76064de949894a0286273d43776c420429
SSDEEP

24576:v5PC7zJ/zJqzJ14TZEy8loWlvarBqKeEZ:v5PCrK7lvKqxEZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db9e907ff9ba826d2060d89960d856c4_JaffaCakes118

Files

db9e907ff9ba826d2060d89960d856c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 963KB - Virtual size: 962KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ