0768317a84ff8e57422b28a2f79f3cc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0768317a84ff8e57422b28a2f79f3cc1_JaffaCakes118
Size

405KB
MD5

0768317a84ff8e57422b28a2f79f3cc1
SHA1

c86f75b97f42a48952ae05b7892a63ceae65c2b0
SHA256

d845e253d3c4babaccbd3496b5284ac13c7742bbd773ffc79db99cf21a5c71b3
SHA512

ceaf2b295f2aeaa42af27f4219979d26eaa7ad3b20766f8bb3009690fe632b60076c91809bba1d829e187e29e0d706393fc7d4fb85deb33a6a178b58b6f97a9b
SSDEEP

12288:zROc0sTCWEgpLEyOzoCsz0VOxxKldtSWM2Xrp:dOgTr9LEy43szEOHKldtSwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0768317a84ff8e57422b28a2f79f3cc1_JaffaCakes118

Files

0768317a84ff8e57422b28a2f79f3cc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ