aacfe9c983352aec5a3a52fcc1e0a598_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aacfe9c983352aec5a3a52fcc1e0a598_JaffaCakes118
Size

759KB
MD5

aacfe9c983352aec5a3a52fcc1e0a598
SHA1

aba1cd2079bfdcfe4fcf2fcc405047453d84b1ef
SHA256

5e49624b4e262937e26ba07666adf20634a183d91290479e6292249fa2acca7b
SHA512

815357bb220749f2bbf22a93b98bd627c628848484c345ef7625018f4fd1d4d343e7e6913291e08f665ea0394d9a0d8f3fa223fd7bed26d3d5ec91d6bd7f4268
SSDEEP

12288:pe/n+JiuXSK2tsuXSK2tWjad5DwWIOw5CNjAj:y+JiuCK2SuCK2gj2wDOQQAj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aacfe9c983352aec5a3a52fcc1e0a598_JaffaCakes118

Files

aacfe9c983352aec5a3a52fcc1e0a598_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SyECWIGCUjuITwVS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ