9c34e5e706db4864d67d13b81bf3e04b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c34e5e706db4864d67d13b81bf3e04b_JaffaCakes118
Size

269KB
MD5

9c34e5e706db4864d67d13b81bf3e04b
SHA1

76f698010029a7e50ff03046e51323ade7f2d88a
SHA256

2fb76d150060a99640c7a0ffecbd5fbbf3fdbc6ae4220a65bb1213d1f983e3aa
SHA512

300b8e6b640e0cee3a12cd4371457d9bad7a15ead05232ed884508f43b68bc143d0426f86e67c266320c1da70e066be4de9b7c31c0b0af313dacf9881277189d
SSDEEP

6144:5CwKO7kYq8V34NDDiWwGVdmuVbqjXO5NR3BLQnR:5FKO7jqG3WLVsje5NR3BLQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c34e5e706db4864d67d13b81bf3e04b_JaffaCakes118

Files

9c34e5e706db4864d67d13b81bf3e04b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

DlL.
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ