038c9217b0efc785d4918f39025d33f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

038c9217b0efc785d4918f39025d33f9_JaffaCakes118
Size

274KB
MD5

038c9217b0efc785d4918f39025d33f9
SHA1

209f8e42e860bb6f0347e1a1e062a80c687ef9a8
SHA256

06f5a8937e00de4ef84aac671f63a639435a8aca328c221c133c91907e69b720
SHA512

9440dd23a2948079f4e83c92ca97d5da011600b812af96b65a32853455e5b9d0765a4634e5f88499d791b61f10d75eec822a86056fe60369d825ade7babd1077
SSDEEP

6144:j2W0ppCtcXjeHYy3M+fefVkXpeV+MuTk6:jcpLTe4y3hGyG+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
038c9217b0efc785d4918f39025d33f9_JaffaCakes118

Files

038c9217b0efc785d4918f39025d33f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

?g$MR3
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ