a89cae7074a69f416bdcc29ec5860894_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a89cae7074a69f416bdcc29ec5860894_JaffaCakes118
Size

597KB
MD5

a89cae7074a69f416bdcc29ec5860894
SHA1

5b7c0e4eba1e79e413d0668c6ee751e45c9d786c
SHA256

a900d839a0b9eb00cdecce3341c7fd63c73c47f0a3a9a3a25381a9f4e8347a68
SHA512

bc08423925bffcb89a82cb8d044d871f74124dfbca7df445a9bcca9d4abafd08bc5de389069d8d828d4ef3e20a39efa00cee6830044d87eaf52775e84a7da1de
SSDEEP

12288:4osspP5Lzf8osspP5LzfcqcWhr5AZ80sCQMw4P:npP5LTLpP5LTfJqZ85Ctw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a89cae7074a69f416bdcc29ec5860894_JaffaCakes118

Files

a89cae7074a69f416bdcc29ec5860894_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ