2a167a298508c41128e0fb4207bfcc36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a167a298508c41128e0fb4207bfcc36_JaffaCakes118
Size

477KB
MD5

2a167a298508c41128e0fb4207bfcc36
SHA1

b696ed9086431631b0186e240181b607d7278bfc
SHA256

a6871feb491e3c89b11f1ff949f92548a6a1e74a498c41a025a478f51b55c42b
SHA512

a3f59d15188ab596d5c00eb83ad1b1e4239cb2de0e685c03a3465ad00ae92f9ab5664d5ff9e9266f57395dc4d410d661d913c9da8c87f3244ae632cf34453a95
SSDEEP

12288:FiU42iNcv2zv1gqvOZij5xa/QnrKuj1R9nHeGnrK:IU41t2qvOcjDOQ2uD9n+GnrK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a167a298508c41128e0fb4207bfcc36_JaffaCakes118

Files

2a167a298508c41128e0fb4207bfcc36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ