4a9851fa839e0ebc2ce04fed9414c166_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a9851fa839e0ebc2ce04fed9414c166_JaffaCakes118
Size

267KB
MD5

4a9851fa839e0ebc2ce04fed9414c166
SHA1

e62e00c4cf65421ce553b13e6d352dac883bd058
SHA256

a2f547b1106afee2c94402d134aec30815b99ddd4ec8436bf220324f05797c65
SHA512

909b8cbc0c2967cf6041130b7223f91d0f8a3b349e5bcef74d3d94f96f26ce8b3e62b5eb5b195e763d4f03ab2a2a929f7d8e4e3414bbde0c8a18d1a3a5e61ac9
SSDEEP

6144:9maPE/S+axxriazo30dMGBb8jIbE88A5vc1GGO6amlOLKqDv/EPW:9/P3TxNiuc+Z8juCAOfXlOvjkW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a9851fa839e0ebc2ce04fed9414c166_JaffaCakes118

Files

4a9851fa839e0ebc2ce04fed9414c166_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ