374ff2f49705c273bf1d8b1ffcfeb3a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

374ff2f49705c273bf1d8b1ffcfeb3a5_JaffaCakes118
Size

190KB
MD5

374ff2f49705c273bf1d8b1ffcfeb3a5
SHA1

e390def7532711d6ebae14215701c1209d2f7808
SHA256

91b0a160a474e9cb6ea0d6e5c6f2cec2a8c5c7790828080625f2795a1be83233
SHA512

8c179350dfb3810324d0f090fa45dbf308643c5da74a36247296a73f7d407f5bc3dac01e2abef0e36f33285df622c4c693fcd1c4abc436d3202aebea85ee773d
SSDEEP

3072:AkSw3XjJZ6pdCT8rdz2iJYr4SnQerJgybbxxCwtrWii9AEwA:rSW9yS8Jyi2VQerbbCYSQEX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
374ff2f49705c273bf1d8b1ffcfeb3a5_JaffaCakes118

Files

374ff2f49705c273bf1d8b1ffcfeb3a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ