2002b9c4c896f2f45e965782431939bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2002b9c4c896f2f45e965782431939bb_JaffaCakes118
Size

55KB
MD5

2002b9c4c896f2f45e965782431939bb
SHA1

f66c428071dae40ab8e7a971d65ecfb894eb24d8
SHA256

fd0bfbfce759302d5fe518321b671b285ddb3a6d8fb8010ff55bcde6f2ab9540
SHA512

83988112407bf89353044d092247acf9025d71accfbd94cf2234dfe4924309a40661e7f6308dc230cb60754de6b509d5f175b67ba233be63caa42cc528961f13
SSDEEP

768:ihFVirHwB8UEqP2fnlloW7pdAanuKOsPXZhjQsRZEeWqsU3ItJp9:inEJ5I2fnlrpdBnuzsRhEtqsRr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2002b9c4c896f2f45e965782431939bb_JaffaCakes118

Files

2002b9c4c896f2f45e965782431939bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

o'pN"S<|
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ