b23ded7e08c1c1996e9942f0a806e5a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b23ded7e08c1c1996e9942f0a806e5a7_JaffaCakes118
Size

359KB
MD5

b23ded7e08c1c1996e9942f0a806e5a7
SHA1

d1283fa0d128cf184208a3ee043af189b4f49031
SHA256

68d6de87f8496713e2142e4639c70a31273ea3945af6cebe19e5d3267e4d9c78
SHA512

50bb229101d6669592a6d2a224139452a699f284c2c458776d2c559dc629233534ca0ad62c46404f2f96f544db6404fbc66206e03eb3ec264f30a3b13c941ece
SSDEEP

6144:s9AqVekDXb4Xakq0TkShBLL/nAli7Ff/rslthStczu+bhrm:ke6eqy7LglthStyu+bhrm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b23ded7e08c1c1996e9942f0a806e5a7_JaffaCakes118

Files

b23ded7e08c1c1996e9942f0a806e5a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ