dbf051324f11b212a72360bd87f83cc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbf051324f11b212a72360bd87f83cc3_JaffaCakes118
Size

265KB
MD5

dbf051324f11b212a72360bd87f83cc3
SHA1

83468f9b78b07f972a76b05afc6918dc48ad78d3
SHA256

abeb6a5732318dc90dda6d05548903746dedc7bb8b453201e8088a609689ddb4
SHA512

3e5fc5ceb498969d55fdaaf987bf8f6de04a54ae7538137f5858f0e5d6e2a2661e964941c13708e692c3d42a173d3f80e0596921f0cb81c7ab25022a2669cd94
SSDEEP

3072:j4rWioa3blYcDTD/M1RjJxbZ3iQiiMfcFbaTh/INZyXz/8678ib1uMfwaIGrsxnY:jqx35Y6TD0l4ZBVINgXr8M/NZ5WCgX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbf051324f11b212a72360bd87f83cc3_JaffaCakes118

Files

dbf051324f11b212a72360bd87f83cc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

-75h
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ