b8338314d5ddfd3ee006332a9642e0d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8338314d5ddfd3ee006332a9642e0d5_JaffaCakes118
Size

8.1MB
MD5

b8338314d5ddfd3ee006332a9642e0d5
SHA1

37fa175b87de85f3ddaabfad7f7df4938e008341
SHA256

885757104999165d51941cafd9cc5e60c7866de8ae0e976184fde296443b90f9
SHA512

cdae2bc925a04fd09d977942dd5cc10c8be995d648fc54d49999a8f99230860ba0efec21eafb37362b6584ac87ad74ddd365b392e580d60397785e90d93a4526
SSDEEP

98304:rKGuSm5Pca7vBl2rrcUe0Z9cKJwH5NfNvT7:rNg7vBl2ncUSyaNFv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8338314d5ddfd3ee006332a9642e0d5_JaffaCakes118

Files

b8338314d5ddfd3ee006332a9642e0d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ