ac1d55681708564dcb76848f2d302c43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac1d55681708564dcb76848f2d302c43_JaffaCakes118
Size

418KB
MD5

ac1d55681708564dcb76848f2d302c43
SHA1

3e3b4f81d63c6e5d28df161a41386b5f58947e09
SHA256

2f83790acfc74b80a97a5370aea3ce674278ce83239b2ecc875cf1522c9d15c6
SHA512

91d51b450c57a816080b47436a4bef5d25bdaf014e682b8bdbea894c920fdf0081649c4923ce700e43160071e05236af823d8a03a5eac1186e161bb480f9d140
SSDEEP

12288:jUbxQEcGHJxoM1wfAd9M4UAaBzoo9nl9sOZV34O9s:ixQEV/Fhd+pA8zB9nLV34Is

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac1d55681708564dcb76848f2d302c43_JaffaCakes118

Files

ac1d55681708564dcb76848f2d302c43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 415KB - Virtual size: 415KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ