934cfb53d21f04a438424aad500436d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

934cfb53d21f04a438424aad500436d3_JaffaCakes118
Size

645KB
MD5

934cfb53d21f04a438424aad500436d3
SHA1

de570a8025fb044b841ebb7ac0474df518dab571
SHA256

f8e84fcd0a18432827cd1f86376c46982d971f2a9cea5c0c87defef7a1f09708
SHA512

bd1e6b647ac3dd1067cf6253fadf7c819a6c568966e100c14e6e32d371992e110d0133664262217caf2f71ab7b342c4913e15cb9e063e8f539acacc8297b3af1
SSDEEP

12288:sYM6HPBTePLckoRJR/5+4v17JGvqdBSw:26ZuwkQJRB+4v17JRd8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
934cfb53d21f04a438424aad500436d3_JaffaCakes118

Files

934cfb53d21f04a438424aad500436d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 449KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ