f4c5839cb7a0b786f565f5e24b62aa9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4c5839cb7a0b786f565f5e24b62aa9f_JaffaCakes118
Size

475KB
MD5

f4c5839cb7a0b786f565f5e24b62aa9f
SHA1

e0ab4a1b64524ce84690360a50ebc74ad87c1fde
SHA256

2c24146a661b6f88e59f571d77729effba10e0326fc7a4bf52daf2b58bcbbf7d
SHA512

1c019fdb0cf3f2050ca7faf1feb06b8bd8feb35e24cb544f90e44a6579634296be89c671b0bcb6e61b5c0db591f4f0ac340caacae22f17b4d7dfc6404dcb6a79
SSDEEP

12288:N3taORhPVcmcjwNRkwfJptUO76UJ4roU7h7AN3gB+M9eZaPRsXvo0AKqgqV:N3kOTKUYAC9UAoShsKB+ML/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4c5839cb7a0b786f565f5e24b62aa9f_JaffaCakes118

Files

f4c5839cb7a0b786f565f5e24b62aa9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 473KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ