2110d509e659ba0fcca494ae04595672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2110d509e659ba0fcca494ae04595672_JaffaCakes118
Size

3.6MB
MD5

2110d509e659ba0fcca494ae04595672
SHA1

16779120bbf39e8aaff27ba2f83edffc85a47744
SHA256

f749a6327bbe771ba7503d75ee7f239dc8142674d5051652d153993096b471ae
SHA512

6de6eccf37c4e06c906c386118cd1cadaa1694c732bd7aa88d3676e5b14843fa7c78328e3d684304f8363a6438b22130d0d9d743dc6edb5073bead4ecd5062c5
SSDEEP

49152:FHo3cHU7yNDDVLztu+WnPbApRwM1LbK2cD:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2110d509e659ba0fcca494ae04595672_JaffaCakes118

Files

2110d509e659ba0fcca494ae04595672_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ