190c1b1f833c848b5fd7a53550570f42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

190c1b1f833c848b5fd7a53550570f42_JaffaCakes118
Size

56KB
MD5

190c1b1f833c848b5fd7a53550570f42
SHA1

02bf74b563b002bfb8e975a2b706ba21760177e8
SHA256

cf0b497330c00c1c1b8f9b27c67b83b485df85783e894d2031621ce5cc662e25
SHA512

8f6031ab8899abbf17a430de698bc54829ca97a5ebf425e09149cee360a1014235c961ef51bfc2ae685083cee39cb958f2a0644f0d36c08ab64b98ef751f31fa
SSDEEP

768:MiGjDJy4h4iOB0CB5SrJtmfNDw0v6V4Fix2jBg3Z:MiG3JyA4FDwXmVDw+8LJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
190c1b1f833c848b5fd7a53550570f42_JaffaCakes118

Files

190c1b1f833c848b5fd7a53550570f42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ