22be7a3575eb642da3b3b03fe61f35c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22be7a3575eb642da3b3b03fe61f35c4_JaffaCakes118
Size

2.6MB
MD5

22be7a3575eb642da3b3b03fe61f35c4
SHA1

7dd20dad8231aea313133616d492ea8e6afbbd93
SHA256

f5df368b1d6957328d8c0769f03b4d8df501e7db559e47444263c3783e792374
SHA512

a9b6d467008632ce60177eacf667eadbd82f6f8b54e0fcf023034a48203ee3fee785f3cac874a4d96d5167db8f21bd9839f078008b354c299f70f7eed2e0c31a
SSDEEP

49152:xwsF8MWmlxEYsGxSFTJqj5AxGu4sZLnM3yo:xHZWmc6+x+sZb9o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22be7a3575eb642da3b3b03fe61f35c4_JaffaCakes118

Files

22be7a3575eb642da3b3b03fe61f35c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 364KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ