3145d0d40009f64704d0e023eb6c14a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3145d0d40009f64704d0e023eb6c14a6_JaffaCakes118
Size

814KB
MD5

3145d0d40009f64704d0e023eb6c14a6
SHA1

c81b405011573a1ae1355a6c1ada84d3999f4c66
SHA256

99c5099fbfa8cbe7203ef017ad350c0e725f50716ed71f6e0373e353885dd344
SHA512

ea55b2d6244d752f7c0c48900cc5a5e211adf4b6cc257c3916f4150ec239a462c2a2b4e412cb6d1e92f64c06299f0e3435b35034c9b5efe2477f69ce299beb67
SSDEEP

24576:SNgO5QN1eoHEbzykE1kZFdGhWXEMkvmgeQ:SY1jkbzjE1k7d0WXElm0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3145d0d40009f64704d0e023eb6c14a6_JaffaCakes118

Files

3145d0d40009f64704d0e023eb6c14a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 812KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ