9b4b62b5e3d35d96703fc21a32238ba8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b4b62b5e3d35d96703fc21a32238ba8_JaffaCakes118
Size

272KB
MD5

9b4b62b5e3d35d96703fc21a32238ba8
SHA1

af8cf177669a6b21b62f7565cc51454438f65714
SHA256

d72f5381652679af9488f2c944f890ed94b3e0a230313e32586d7d0203d86194
SHA512

2251ca178101cf3db7f87c434a9f16be98c628ca4421c85de513849c87ea582a7287443163c4033a06c143893d00884eb6551687d527dd93afa5c9f33f0470ad
SSDEEP

6144:M3uhBhbVLMyY+pYaFed9JiENtt/3BIzjwWnwShHp:M327RLzY+yaIvtPBEjw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b4b62b5e3d35d96703fc21a32238ba8_JaffaCakes118

Files

9b4b62b5e3d35d96703fc21a32238ba8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ