9efa501ca6382f54400a6dd76a3aa5c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9efa501ca6382f54400a6dd76a3aa5c9_JaffaCakes118
Size

110KB
MD5

9efa501ca6382f54400a6dd76a3aa5c9
SHA1

12805b3524fa7443f4f232e3bc0ed3d9d5eaefb1
SHA256

1c8b0ddc0fcb9740ac8b8c8bb8b0107017728dfd9512a979f1061e5bb3a396aa
SHA512

36fa08860eee971436821c7664e3102c0943102243127a2f292744c303ad1d44445acb010fad3e415bf13b2b62d234f628240f7a7e141407c5bfed36ca140a21
SSDEEP

3072:lU6i+a1/XVUivzJQGzJsTgEYbIU9hbMRHS5dgK3n/Rt:kiQzBJwAb9bM0UI/Rt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9efa501ca6382f54400a6dd76a3aa5c9_JaffaCakes118

Files

9efa501ca6382f54400a6dd76a3aa5c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ