7b9e6b6a3c279a274a5e3e525e722639_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b9e6b6a3c279a274a5e3e525e722639_JaffaCakes118
Size

260KB
MD5

7b9e6b6a3c279a274a5e3e525e722639
SHA1

e395fbc010ce4aba44647e69f74b7918391b3b17
SHA256

4cadcc03d5341ca1e570b318474bbf87faabfa51101dfbf040df5794b813ea52
SHA512

e76141bce301e8dab1d2c4702d3965eaec4f4307524f923734f63963d634a4031f1eb70d8f862175f3bf01de6ef7beddc0cec37d05bd6ffbe167e04347eac5c4
SSDEEP

6144:YNyrWJ4kQJwewqk8UIjQGKVvEJaUtXX2Y7AvuVDNE:YeP2EbKSwgXX210xE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b9e6b6a3c279a274a5e3e525e722639_JaffaCakes118

Files

7b9e6b6a3c279a274a5e3e525e722639_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ