971b4920c07330e68bf402bfd1f8bc8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

971b4920c07330e68bf402bfd1f8bc8f_JaffaCakes118
Size

434KB
MD5

971b4920c07330e68bf402bfd1f8bc8f
SHA1

611a2e34399043c34dc39fbeb14e42c1183c01da
SHA256

18be8256c63f4991a328ebbc9866294589609a4fa562a203a74051d2919d7f2e
SHA512

80224a614566131fda8f26197854bafffec6c6317953399a7ab6a3da6d6e9926b64df3c1635864c1c916b140633710d8de1b39e1bac1299d03fca6d653b5a944
SSDEEP

12288:YrFXmUP61FC34hYyRd8R0xp2R8MLCnE8AZkRa4L+Q98:EgFbhYQk0xp2RPkRaz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
971b4920c07330e68bf402bfd1f8bc8f_JaffaCakes118

Files

971b4920c07330e68bf402bfd1f8bc8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ