95172f34c4ff725924197fa8931596ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95172f34c4ff725924197fa8931596ff_JaffaCakes118
Size

280KB
MD5

95172f34c4ff725924197fa8931596ff
SHA1

3dd47f352c6d2711b3f7cd248582b5579c9897a3
SHA256

0c7a28e2af05d747c700157e85a89249e8660c1db107a6c580fceb27b146705a
SHA512

e1c1aa8394559ab89c710b5de1a5f5296e5323ba84efd87e38d033a8dddf684320ef9db2a035d19e26d998f7563d722a6e3c7fbb28d30449d9c5a75fa4d2fbd4
SSDEEP

6144:j3lUG4mQsV4TLE/LXKtN2naeyXNqsdgIYE:ziTeLG0nWNDgDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95172f34c4ff725924197fa8931596ff_JaffaCakes118

Files

95172f34c4ff725924197fa8931596ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ