691fb020a3389340daa08d23ef57f9b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

691fb020a3389340daa08d23ef57f9b3_JaffaCakes118
Size

20KB
MD5

691fb020a3389340daa08d23ef57f9b3
SHA1

779a28291f94d38d8eca20036814966692f41d91
SHA256

8314fd9ed7343d17b7fe4e920e5a71e2cd55c5b4cae098f4cc92af5320cfe64d
SHA512

6eda699259f3d40b7dbfe70b480d1b22f0cbb9232eed11aa53f1f7990fc96ec597b85658aab88d3efd40a13f725dd2587a3852d1c4a45b6651af984d1509171e
SSDEEP

384:rh4KRTjOGj6EjiVlZ+GFHAB2eHTTlD8iZwuYr9Touz0Cwb3:rh4K1J5jiVlZ+GqB2o8zr9/Dwz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
691fb020a3389340daa08d23ef57f9b3_JaffaCakes118

Files

691fb020a3389340daa08d23ef57f9b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ