9dca9f65028c1eaed40a8cedbadadd98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9dca9f65028c1eaed40a8cedbadadd98_JaffaCakes118
Size

15.3MB
MD5

9dca9f65028c1eaed40a8cedbadadd98
SHA1

31482cff4f65698329764b65d3441786eb8dd9c7
SHA256

1fb07da5da3994dd8f00723ce7dd6134c982ba0a738a23e1c8c61202c4dfedac
SHA512

11a976a6f4283df1e172d7fc4bb2b5fb9472bef89b47bbf6d2b91f7b65d633dc3ff07496a0e873a42b7da58e67c18bfee452c95f7c558f0a2c371eb1fbb4209a
SSDEEP

393216:vnNwp1jG94UpZ1Go+fP9dt2IZ9mOsDq/BQi:vNW1y7px6P9d0q9QDq/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9dca9f65028c1eaed40a8cedbadadd98_JaffaCakes118

Files

9dca9f65028c1eaed40a8cedbadadd98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.2MB - Virtual size: 15.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ