f0dce2b0fb7da96ded626ac27eb1a922_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0dce2b0fb7da96ded626ac27eb1a922_JaffaCakes118
Size

178KB
MD5

f0dce2b0fb7da96ded626ac27eb1a922
SHA1

763e276e19cfd15a2c85b54b3c659095f7731310
SHA256

7f5b3d3181c0ff9da0f36fd85a72ffba18aa65463b44b74c74ab0fa05a1edee9
SHA512

24f13e3b854dee5eb457b6c8e53acd1bc31d7c2322d380cf0c28e8e425e1d2fdb55b5d1b215cd01944fb37256482f1ee906db23b5c55910156a4a118455d1ee3
SSDEEP

3072:D5K324XGdp4+/tAbgyH/oMLiNF+87HiulJUm/L4saR/H//y9aox:Dp4W3HAbbH/oMLiNF+87HiulJUm/L4sj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0dce2b0fb7da96ded626ac27eb1a922_JaffaCakes118

Files

f0dce2b0fb7da96ded626ac27eb1a922_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

)5G+Gp9
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ