1ed9f4a7ca1b0e8312ed99901a2f122d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ed9f4a7ca1b0e8312ed99901a2f122d_JaffaCakes118
Size

280KB
MD5

1ed9f4a7ca1b0e8312ed99901a2f122d
SHA1

c828c5737d64abc5d808fe59227df09649b4d9b9
SHA256

7a6348c33e07b3353863c3dca7bf8bf89a622e96e680f326ce9e264892301930
SHA512

c36b5ae5cc8c7940f8eada1ec30854ca77e6ff74356bb00d3f30b9afe4ba08cda188641986735e8076abd0c581a7d232da6b6759b5ea12156753c1e387ed9d55
SSDEEP

6144:cLyUwaWAv/pp5JLD3Rjsyf6tdsykDIO9RHcne/u:YNFWAZpjtoLsykDI8RZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ed9f4a7ca1b0e8312ed99901a2f122d_JaffaCakes118

Files

1ed9f4a7ca1b0e8312ed99901a2f122d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ