f421e6199c71e21ddb26b03a89942a72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f421e6199c71e21ddb26b03a89942a72_JaffaCakes118
Size

54KB
MD5

f421e6199c71e21ddb26b03a89942a72
SHA1

cf5d8ddd44c2ed8b914127a6579b2a5338eeb1af
SHA256

cd07b35f176d99b0262c2b5ac7f4aaba34ffb6e973326bffdfc73d83302ef22f
SHA512

eba9c1f9ba0162fbb61dd7b0c47ab4c751a031e838bfae0b1d7548f6a406ee478d29b79e7213cf651c0d2e3808bfc88db16aa0c5aa96937d8bf91dfcc44c404e
SSDEEP

1536:xCn6xC20KY/KmYp7fraMHM5VsJf72Ay1dhN9w5UmS1+x:4neY/KmYpDf72AO39wqmS1+x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f421e6199c71e21ddb26b03a89942a72_JaffaCakes118

Files

f421e6199c71e21ddb26b03a89942a72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ