1510230194c0cd8df6c81692822f5ba3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1510230194c0cd8df6c81692822f5ba3_JaffaCakes118
Size

344KB
MD5

1510230194c0cd8df6c81692822f5ba3
SHA1

02c929c74fe6b95d37a9603d05921c3b059d24c9
SHA256

7d47246a8a3a3e6fc49c7895066f72956adac0e7f1211b7f4dbecad56f737fd7
SHA512

5f673438b511f885ed4a50e0d0c54fd27639344725d7978407a70618b17713223b67987239112e95d3188a96e41c224030cd6386b6950046cde48997c27f59a2
SSDEEP

6144:Qp9rSPFU59qFEWJLjMzHFKlfvnZeBu998NXX:Qp9rLjq/J/MLFKlfvnZZ998l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1510230194c0cd8df6c81692822f5ba3_JaffaCakes118

Files

1510230194c0cd8df6c81692822f5ba3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ