29c1da1ef294e03ed08adffe948e0a0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29c1da1ef294e03ed08adffe948e0a0e_JaffaCakes118
Size

192KB
MD5

29c1da1ef294e03ed08adffe948e0a0e
SHA1

8011d9023cf969710c8b1ad8c99feaee5b7ae3b0
SHA256

0a85065f6629bca46572a6a629162521db51b20eb16229b63c2e66517df39a7b
SHA512

6661b00e3892daad6f8f8d398f1e7527a37e7cbe6163eff8757e83b2c15c163473a6645e4064b62d23bba47c169a8f57e1fbd3b70257cda8381868d9a0c77702
SSDEEP

3072:1f/0K6lLaycpRUEWkH+hva2TJbke9G2udwQQ1alX2oBvOolY7/rL:uK6l9cpRU9Jbke9G6ql1Hy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29c1da1ef294e03ed08adffe948e0a0e_JaffaCakes118

Files

29c1da1ef294e03ed08adffe948e0a0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ