0d9f4cfd7e9832130b6354a6a388c164_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d9f4cfd7e9832130b6354a6a388c164_JaffaCakes118
Size

1.1MB
MD5

0d9f4cfd7e9832130b6354a6a388c164
SHA1

adc78c9d2d1fdd5c87d7df22ee980471dbcd74f9
SHA256

7c3dcebffb8897039b6c9d722cfb553e06035a8e51c2c978cc0e38faf59c4c18
SHA512

ee1c1f63473a8c21c85fbb2f07368739bc5b7fc2a35ce26f66a7f1d82e871dba5c576a3504ed117e6299db655b1cd9215d43082016f7a2fee35e9fc7df268a54
SSDEEP

24576:/d8xg1PEqUoBicvoGAiTIDVvZbx+7p3+tq/hafC8Uq:F8xg1sqUoBiHhVZbxqFQK8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9f4cfd7e9832130b6354a6a388c164_JaffaCakes118

Files

0d9f4cfd7e9832130b6354a6a388c164_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 939KB - Virtual size: 939KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ