f3440090e957606c0fc582899eaa1a07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3440090e957606c0fc582899eaa1a07_JaffaCakes118
Size

1.2MB
MD5

f3440090e957606c0fc582899eaa1a07
SHA1

eee8702155e7af6535a4a18648265474918ced57
SHA256

cd96ef2d6083cbe4bafafacd66572af467fd134e00fa89115fe05eff94bab242
SHA512

7574d44a9996b33b1c7cb2eea1a0a300b2c8bfb2e76a340e0923919a3b3e12896bf2d465e464a3ef3bfd1f657a79a7852d97d659a476442d36676643662232fd
SSDEEP

12288:5x/6S+HxlkkKzgS0dqfce+OjuSA+uLfekTG4zUFMVAiZc6opBB7mesHTo6tD:5xuxSkKzsEApSA+uLfekS/DtPycS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3440090e957606c0fc582899eaa1a07_JaffaCakes118

Files

f3440090e957606c0fc582899eaa1a07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 984KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ