f4b4fa27f2266caaaaa1e0604cf233b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4b4fa27f2266caaaaa1e0604cf233b5_JaffaCakes118
Size

1.0MB
MD5

f4b4fa27f2266caaaaa1e0604cf233b5
SHA1

6ad51fe1b5b10a8533dba26d53cff45092cf5511
SHA256

d9993f674fbb9becb0c3cf2ca690b99f581a1dfb0049edecaa188e5e6ce2e41b
SHA512

7284c9cdd5203ba30f8281111416f487bef50ef9ab42bca1e561818b502a34a50960de7c532df2982eb598fad2f7feac8031c8b1587b467ca15a7c18fce8230e
SSDEEP

12288:EALitz52ARHyT4DMXcpTyakJbtzx+i1Qdr1kCLfEonj1NTK4PRvZjLlxMC3kOPoS:MpyKAzUbFf/fnz7kOGP9K2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4b4fa27f2266caaaaa1e0604cf233b5_JaffaCakes118

Files

f4b4fa27f2266caaaaa1e0604cf233b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1009KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ