2cffbef6d74d9b866e4a492068ec0d9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cffbef6d74d9b866e4a492068ec0d9f_JaffaCakes118
Size

640KB
MD5

2cffbef6d74d9b866e4a492068ec0d9f
SHA1

6292cafc38f8bc6de22bf9195cf5e49437c75626
SHA256

790b8690c6cf507cecc932f265ff899e27d2665e66084a097f36f2e2744e3c5d
SHA512

dfaa445c2fc05f6417edf1638dd469677d9b1004882b3a8ffd8d31029be7dd668750bf55abc8c7911303c19673ed566239cf81cff599bf4353b112e8649f1de5
SSDEEP

12288:7C2QjYY2/tfMpbk47g5vJh0o7DJqCR4udO3Z2j6:9RyQv/04q64udL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cffbef6d74d9b866e4a492068ec0d9f_JaffaCakes118

Files

2cffbef6d74d9b866e4a492068ec0d9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ