2760950e357e9d956c1f1b4679729ce8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2760950e357e9d956c1f1b4679729ce8_JaffaCakes118
Size

343KB
MD5

2760950e357e9d956c1f1b4679729ce8
SHA1

8ad814ed32ed9fb495da62048577de54c0dd4daa
SHA256

7c7af24d7f278e75ca7da19167fa81c257f332d18696dbb2b1a5e1db2c3d76b7
SHA512

26838b9763dfa808865ea8fc62e727499025cca5083c3e40d4c7f2029e0519442c2d01ca1cc30ede804b682929b8f235ac97799d6add5d7b779462cdda9c6687
SSDEEP

6144:6oi9zcb1s/omORmA0/X4nMGmcF2dA2UTCteT0V0aSUAiknAB0n:l+zcb1hvgAUX4nMGVwdA2ImS0V3SUAiy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2760950e357e9d956c1f1b4679729ce8_JaffaCakes118

Files

2760950e357e9d956c1f1b4679729ce8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ