1ab8880fad831d01717ade6dd854b205_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ab8880fad831d01717ade6dd854b205_JaffaCakes118
Size

57KB
MD5

1ab8880fad831d01717ade6dd854b205
SHA1

2c71c0ea3452b52496bcbd50fd3b0b069ffbaf07
SHA256

50e30214958a568b8905f89853d0d4bdfa88350cd9183c905ea8cd87d4592a82
SHA512

d7446cb4fd412432ccf81d21471e9cfc8f00f3051f82732479064092aa064fe0a1d2e15e049aa86a91512fabc02d0337e30cf9654aa83375cfe5d2d14ecec7ed
SSDEEP

1536:D6alDWml6BLt8rKnjsCo6QKt9GUHwTO3:R4m0Bt8gs3KdH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab8880fad831d01717ade6dd854b205_JaffaCakes118

Files

1ab8880fad831d01717ade6dd854b205_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tzzeplo
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE