9804e66963b129f687634eba8d6a1356_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9804e66963b129f687634eba8d6a1356_JaffaCakes118
Size

987KB
MD5

9804e66963b129f687634eba8d6a1356
SHA1

f3bf1db4cfc51543c236a4f7d29ac773c81fa0aa
SHA256

013a2b933de17e0b742e35480e21b11b398963b9292541a9e5d68b4860f0d97d
SHA512

64c7ecc9f7b6ec2a2d401af1bc0006bc848a71c3b356baccce54bbedb118075b8e28fade84bbb18614f2151920171b12bff67766a297425c0c6542c1169b7661
SSDEEP

24576:ySoIq/kb83AIq/kb83AIq/kb83WTT6DN:yd8AU8AU8AG6DN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9804e66963b129f687634eba8d6a1356_JaffaCakes118

Files

9804e66963b129f687634eba8d6a1356_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

8???
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

'(@pf =
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 940KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.RVA
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ