08d4356c5e096291dd4b9368e37e4899_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08d4356c5e096291dd4b9368e37e4899_JaffaCakes118
Size

77KB
MD5

08d4356c5e096291dd4b9368e37e4899
SHA1

07117ba552fd1dc5af16e49847a9bbeeaba59586
SHA256

32a9d136b880d80480200d55f9603e547ba667664f88b427ea61e1ef13a19cad
SHA512

0942d40c517cc2b9350abb61176e2a5f128feb427a783e8d20cdbceeec9d629468f244a55702793f03f2a8de9498f3ba27e2eca462c97bcbad4e29972f3e4b46
SSDEEP

1536:7z7hPIVRO4QIsUpvXo9cArg34apN9CFd/EZVnHXJJBjjjjjjjjjjjjBjjjjVjVjC:rYRdNi9cArgDpN9CbInZJBjjjjjjjjjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d4356c5e096291dd4b9368e37e4899_JaffaCakes118

Files

08d4356c5e096291dd4b9368e37e4899_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ