207a6a0bd784d97da5e1e36109914bd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

207a6a0bd784d97da5e1e36109914bd8_JaffaCakes118
Size

280KB
MD5

207a6a0bd784d97da5e1e36109914bd8
SHA1

ba3799698513d90d86a72a6168c1586db8cd3516
SHA256

3144b07757d401019c05ffa08bd5ede6c5c5db50de8c7c5788b162acbf590122
SHA512

ff7343e77012a486f43616fec208bf6752cef09a4bc17d05283856c1e7902ad4016fa874e36d6d42ebbeb02337f9cc0c63d756e7f082049180590c3640462ad0
SSDEEP

6144:xldftt1PYqeza+FBL46b0Nl9LhqcwNx6ik0IYE:xHfttallm9Nl3qcW650DE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
207a6a0bd784d97da5e1e36109914bd8_JaffaCakes118

Files

207a6a0bd784d97da5e1e36109914bd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ