f8c1361be78fd299348a3b7579bf7666_JaffaCakes118 | Triage

Sharing

General

Target

f8c1361be78fd299348a3b7579bf7666_JaffaCakes118
Size

167KB
MD5

f8c1361be78fd299348a3b7579bf7666
SHA1

b2636f32961bebceb174155065bf51838fdad6b3
SHA256

22e23db2ab3c73758943211b94eb28aef61ef6717359fe40509bcd8fd60f6296
SHA512

ab5d66237cfe8df074cecf0df2065fcc770a96cc49ba4c91571ced50cc96cc69eb4bec9ef51b076b5f919fce9af86b55f2b42e8dbdcb732fa74db56ea08cb1c2
SSDEEP

3072:aBHig/xr+VBFaI1YIYiheeeeeeeeefYDeOiClppeppOpplppepppDppptpppjppC:aJZrMBgkSOd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8c1361be78fd299348a3b7579bf7666_JaffaCakes118

Files

f8c1361be78fd299348a3b7579bf7666_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Discord.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ