2bafac091c390440501b2b2df5de13c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bafac091c390440501b2b2df5de13c9_JaffaCakes118
Size

67KB
MD5

2bafac091c390440501b2b2df5de13c9
SHA1

2f36288d4338a5bd214cd8301fd5ea93740bbb1a
SHA256

d858a893c05b12507cea202693f1c108e58ff04a56279616968c810e3e8070ad
SHA512

3a1a3f80be51e084c9e9e5c03197952dbce7f870eb3d327c8ccc091457cfd05530f64d7efa760efb55f532c065ea28147ad39661b9da1b0806c6f90acffa3191
SSDEEP

1536:pmGRsWj2bJ8GWMnWVj5gV2QOi2lkVnX2JxJsyakETnMVnQ:pmGRD2b5WZSVnCykcMVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bafac091c390440501b2b2df5de13c9_JaffaCakes118

Files

2bafac091c390440501b2b2df5de13c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ