002767e7e5db6b50b8fe1981f658f522_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002767e7e5db6b50b8fe1981f658f522_JaffaCakes118
Size

56KB
MD5

002767e7e5db6b50b8fe1981f658f522
SHA1

2c5fc9343ab9a49e891b416bbefdab224ab1bba4
SHA256

76516812f64082a605a0fc564a76d85126aff1d8da1c24153036175f9cba20d5
SHA512

64bba11a5b54bf4d5c597365f7bc17d0f1a5a4a4efbd2d3e1baa13a59791610894d0e566e5b436dbc38ccfe8359edd1bf900ae67d669f3e9547bbfc45ccf074e
SSDEEP

768:nMVI6utFCRwBuHgXyy760xnK9FaIRyHd6vFqf49:nMVI6utFCRwMy79U9FaI2d6vFa6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002767e7e5db6b50b8fe1981f658f522_JaffaCakes118

Files

002767e7e5db6b50b8fe1981f658f522_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ