09fff56e224edb4185180ea67556b454_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09fff56e224edb4185180ea67556b454_JaffaCakes118
Size

430KB
MD5

09fff56e224edb4185180ea67556b454
SHA1

fb4d93264e915f587aa57e772de1073c9ff69cf6
SHA256

ff948942d51c6d63c952d82d2c936e7872c60d4b8a7da30c9868ab2a93b6aeed
SHA512

087b51334b3a56c8cc68695063f9d35bd61625dc5566cdbc881073d61ed1a76b4503805a43e1a0d98634d097b0ef9e7c16b6ec8e16fc4731e410b4ff2488f47e
SSDEEP

6144:FOkSwhFzrCUXwlt0XONIFc5/NH5grZhVCPDENclW84KGEDJmbh0q:IkPfbXwGONqcBPgrZhVCPATOGuw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09fff56e224edb4185180ea67556b454_JaffaCakes118

Files

09fff56e224edb4185180ea67556b454_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 425KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ