91dafaca05e34adcd25ec3f42d64a0f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91dafaca05e34adcd25ec3f42d64a0f9_JaffaCakes118
Size

735KB
MD5

91dafaca05e34adcd25ec3f42d64a0f9
SHA1

c9e4a974f4f613e63a8eb263fb8908f3306649dd
SHA256

9b2666e364be96b45b2e03f85d73c130e2361b046141e53f40ddcbfd19098a2b
SHA512

63b8147bb1a25dc7c05adb2f7555e5f6badee7d34144b7ff7fc59f6af119d8a415710db04067a096ee5ea14ce8df3d0ecb1a6c532d3d7cbb6fd5eed50e07f30f
SSDEEP

12288:ZbhfETJeSFBs3vnIdHPhO3rfOSKj4awRvBpNwFMoS7MDFRGn:H0wSF0vnI5sdKslvpiAkFRG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91dafaca05e34adcd25ec3f42d64a0f9_JaffaCakes118

Files

91dafaca05e34adcd25ec3f42d64a0f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 570KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ