18373ce0c52a6e1945a546392c215418_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18373ce0c52a6e1945a546392c215418_JaffaCakes118
Size

1.9MB
MD5

18373ce0c52a6e1945a546392c215418
SHA1

d42c7d99001bf13ecbf8b4e861473d7550fd1cfb
SHA256

b2878f9f8d28ca8c93add1776a6f7ca2157689b77bc60b6d2cf56c5c1acaf454
SHA512

34be4ab7ba332ab7950a1d7f09b09c159cefae0a4ddae4fda01b343c6ddbac6704fb979dae54fbbc016e1769e43e3afaa56f4aebc6fe5ef73c14452131f8ea7b
SSDEEP

24576:JnYw/dagntVacKBKmvgq+8O3L031R9TL:GSFqDgq+t70lP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18373ce0c52a6e1945a546392c215418_JaffaCakes118

Files

18373ce0c52a6e1945a546392c215418_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ