18d1220a2f8f61f4c8319335d78f8120_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18d1220a2f8f61f4c8319335d78f8120_JaffaCakes118
Size

62KB
MD5

18d1220a2f8f61f4c8319335d78f8120
SHA1

9662cde22bc541ddf5aed1c4364454634bcd84f7
SHA256

21638f08b5e782c686d0becfa790d028d8a7fa1bc8febcb8da56687e23441c63
SHA512

8eb38f94d130298ecf9e28e1aa22fc4dd48aa92788a1f85edac6600fe9a14cf7e95a8cd43bb48a476d6116adb9085e56fd54b57a4ae69d2783fe839b0c2e681a
SSDEEP

1536:TDfRBGUMxkH+pJ/A6f4Qg6qRcMnwbuWZ+OINsJD9:XfRBn+IQ496qRc8ubnIyJh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18d1220a2f8f61f4c8319335d78f8120_JaffaCakes118

Files

18d1220a2f8f61f4c8319335d78f8120_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ