1c59696c0e6b4141609d22e2aa5935e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c59696c0e6b4141609d22e2aa5935e4_JaffaCakes118
Size

260KB
MD5

1c59696c0e6b4141609d22e2aa5935e4
SHA1

cf920c6b66492cfb1064021d0b8ecd773d6bed06
SHA256

9afc94bae5b92da35b6517f9a3a9016529715e4b579987f3408a9030b53ea3c3
SHA512

f0008fb2ee70b3d0ee52ffde2b8e25e9a51fe7dcfd9aff0bc8c80e1a55b141662ea32d4d55f86867eb04dabdafa55ea9ffbd1461ca954a364458b398efa59d9a
SSDEEP

6144:8TEqU4vzohLxW9CPjy+dkM6GNMjk1ZliHZcUgk:8T4jhEedkA1ZEuk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c59696c0e6b4141609d22e2aa5935e4_JaffaCakes118

Files

1c59696c0e6b4141609d22e2aa5935e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ