33b68078e7a6f686046b3924f45d1521_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33b68078e7a6f686046b3924f45d1521_JaffaCakes118
Size

56KB
MD5

33b68078e7a6f686046b3924f45d1521
SHA1

e2df6bee3871edbc7ad40cf1bdda3daba803da4a
SHA256

860587ef88e6dad7093004e099d54247b52329c3f2ea2faec01c14af83ef1d10
SHA512

a2d0ebce62f688d50fa1f3a5b376624b61ab1080edbac91a75b9b2c55675bfc2810bd538e2b7ad3f49827d676626e91fe522b78d03f1a2ba10f6ed99a7effe1c
SSDEEP

1536:iGuNGwEk1Hfe0t+B2H0glegvlr4ItFzye:ONGwB1/HtQ2H0eegdrvFzye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33b68078e7a6f686046b3924f45d1521_JaffaCakes118

Files

33b68078e7a6f686046b3924f45d1521_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ