f8dbcd8e7e4d4997f086705a9eb4c27f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8dbcd8e7e4d4997f086705a9eb4c27f_JaffaCakes118
Size

29KB
MD5

f8dbcd8e7e4d4997f086705a9eb4c27f
SHA1

b5385b664def73b49bdcc3d3fa07b31fb9d36b84
SHA256

0f76fe26c1251b38c15e12bb011bce3537da98c39fad52ad23682f9d49e0d858
SHA512

4739f3f154bc2a720c9ffbd94bf4bb4df1f8cc918c0e3ceecd0bf6cc19e3eb66a55f8c93c57b0cdcc031a3cf73b897a9c11f71f12057c0bd8931cd7992616aa2
SSDEEP

768:TCiTZda15iaOsbz4mCZWZa4Aq7dfR9VpWf:G8ba1bbz4LWkm59Vp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8dbcd8e7e4d4997f086705a9eb4c27f_JaffaCakes118

Files

f8dbcd8e7e4d4997f086705a9eb4c27f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ