34763bb96772655b4d87eccd575aacc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34763bb96772655b4d87eccd575aacc0_JaffaCakes118
Size

266KB
MD5

34763bb96772655b4d87eccd575aacc0
SHA1

00f1b245214f212fd4133e29453c0c960c75988a
SHA256

47111629a09893e590f91d74e5c30cab9d3d6473410c88964e725859a198d071
SHA512

c1a48ececb4b75ec8e772eaed55b9ab40b12c688094398cdf5cc1af85448b5ec6313b966629d24e6bba5f64e1d4473e4961fb0617cc08df30fe986f4fd5af86b
SSDEEP

6144:rrbancX8aLoP0NXH+6KV/meQrJ9SFfL6Jz6JTnj:rrkcX80oKXH7PP9SFfL64d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34763bb96772655b4d87eccd575aacc0_JaffaCakes118

Files

34763bb96772655b4d87eccd575aacc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ