21892e627af0ff458c1291a925cc6e3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21892e627af0ff458c1291a925cc6e3d_JaffaCakes118
Size

657KB
MD5

21892e627af0ff458c1291a925cc6e3d
SHA1

2d478c8f4c98477b1f25925694173858b80ad955
SHA256

4d246829510539e23c65e6f45137af8de34824ce0754d51c20834d4fd07b0623
SHA512

9604a4d2dd775ddc9239f7cf932a8ac8938753f85c10dd43dc70daa0fe863dcadbf80070be5bbc6fc6b219cac1929daf4668b47bd86134d142d6a2d9f92daa0b
SSDEEP

12288:YCNO0VNmHzHV2ZtPxcZQMqLy/uaXyNTCDc6Bpt:/Nvqzk6ZaLyHXcTCYut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21892e627af0ff458c1291a925cc6e3d_JaffaCakes118

Files

21892e627af0ff458c1291a925cc6e3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ