18aff7f8eaa11892ac21f3ca56a594c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18aff7f8eaa11892ac21f3ca56a594c0_JaffaCakes118
Size

56KB
MD5

18aff7f8eaa11892ac21f3ca56a594c0
SHA1

7b3bad79abac05ef605c9149b8d5cc218308e0c8
SHA256

aecfe7795e1c1046acd8f92b10ce979d9d9b21069925dcdd01d6b5074321f874
SHA512

39867e3042c13d223ef758b02b4cdb3964b4a027837413e4dee8ef97582ceb937ae21556e743656d91697e795194919aaae4ae363b44abd257bdeed5568a1935
SSDEEP

768:VYUoM7XJobKDTKGHVJxkOE7GGamApjPn0RIjB2jx:SUoM7ZZ6adkhyG7At0R1jx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18aff7f8eaa11892ac21f3ca56a594c0_JaffaCakes118

Files

18aff7f8eaa11892ac21f3ca56a594c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ