19371b897f119e3216a5bb5afc25b7ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19371b897f119e3216a5bb5afc25b7ea_JaffaCakes118
Size

128KB
MD5

19371b897f119e3216a5bb5afc25b7ea
SHA1

dc11d9e4608597bd2399033ffa2ab960df2418e4
SHA256

a5616d50974841344eef12b85f80e323088e7c39594697df658915106f4ec05e
SHA512

4a661999b904c37cab99bca66a5df247d53af6e89c1bd78d2ca8d1e8744ebe7528717d5270cbe36ceef36f16a50a50b9c8cb0c762da747806505a09c0856acb6
SSDEEP

3072:8egbCoJ5sp4Pq4lhkWWhSaHpTdgSr5WrKmVb+b:8xbCoJye5+rv9dhr5W7Vb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19371b897f119e3216a5bb5afc25b7ea_JaffaCakes118

Files

19371b897f119e3216a5bb5afc25b7ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ