b09710f2292e71282442a7305a3cdba3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b09710f2292e71282442a7305a3cdba3_JaffaCakes118
Size

272KB
MD5

b09710f2292e71282442a7305a3cdba3
SHA1

07f3d066e5b8c684da8e5fa63edc6f62f1e6db1e
SHA256

a8aacbec9944c9a5d1c6547bbf94340a8c87dc8b4720e4ad58dce4ff73168ecd
SHA512

f9753b9e51878dcbd76fd6d397b44f9982bdabf4c9a305fa294c051f5873742ac9f6d8d5777d850a2be2dca9bdfe35f23d95ad49e8743196e1b5a218ac29979f
SSDEEP

6144:l1elmQd+KTOVYYgi97pPlJhoV4EBrB8seFYpoQOCx:6F15YgiFpPlJhNarBoc5x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b09710f2292e71282442a7305a3cdba3_JaffaCakes118

Files

b09710f2292e71282442a7305a3cdba3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 244KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ