1abfea034559838a47b1f94b15b23ed9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1abfea034559838a47b1f94b15b23ed9_JaffaCakes118
Size

156KB
MD5

1abfea034559838a47b1f94b15b23ed9
SHA1

c20653ffc4ae4f395998c521bfe59d091f2df9a0
SHA256

227c3fafebb1b2fb6e3ecabc01855dde70a017a840076a50939ff1c6af65afb8
SHA512

b1eede96b6fa76cf2381fbdbf7e40019f3ef9f187feccdb0c1777a501db637e2f9cde126f645b9253bf8671832bf5f5388ac572adc627f9f53a568cd31661b63
SSDEEP

1536:HNxPiK8N+yS6mQQSUIXryCSwOsjRDxib6GqkSZZZ3q:HNxKNWqQ1CWwOSRDEbFUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1abfea034559838a47b1f94b15b23ed9_JaffaCakes118

Files

1abfea034559838a47b1f94b15b23ed9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ