74e437dbc74defb8aade142fb54f7d16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74e437dbc74defb8aade142fb54f7d16_JaffaCakes118
Size

686KB
MD5

74e437dbc74defb8aade142fb54f7d16
SHA1

89c93e622d38c6e5dc819af47e6e6061624c0d8a
SHA256

20aaed5bcdbdfe6a858713753375f717d114611118f0a6af20c110ffc33e6894
SHA512

02b481e26a921920b6a34e9d4b08571acdc8e6a0b92390d2cb63de387e06e2b3ce0dbff98089472b01c54c3ddd8f41f971329614af5649d56de0f423c2d23ded
SSDEEP

6144:m4kf/4kHEjyKPPPPPPPZWSMPoCOJNUEX9bwJNUEX9bDvxwp5LULi90NsC2uNdWe6:RwkudPorJGE5wJGE5bxw7JksRB1B3Ll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74e437dbc74defb8aade142fb54f7d16_JaffaCakes118

Files

74e437dbc74defb8aade142fb54f7d16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

Fs@
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 670KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ