9f7b82820bc13b9b77d6b85404176d5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f7b82820bc13b9b77d6b85404176d5e_JaffaCakes118
Size

15KB
MD5

9f7b82820bc13b9b77d6b85404176d5e
SHA1

6d6529c759653c4f87bbcd370be264f1cb13b161
SHA256

3d1c617d0d9bfef6d91f6e69e7439917762d02b3bf67d120251ec7846daf14e4
SHA512

173168b94d7fe4afe042744d3659c9f86b4577d3ea5fd7e5986f1f7372cb2f9275b56060d9c7e4b9e7b6c4988b78e0fed7457dc486c691f6d6a6f22898264066
SSDEEP

384:2vcTBt6EN5fXZrEw3LxEgca0J7BQcEsGYyyp:2vutBN5/trcaW7Bdyyp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f7b82820bc13b9b77d6b85404176d5e_JaffaCakes118

Files

9f7b82820bc13b9b77d6b85404176d5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ