379f9504ae3b572932985343b5167235_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

379f9504ae3b572932985343b5167235_JaffaCakes118
Size

429KB
MD5

379f9504ae3b572932985343b5167235
SHA1

b960135f8cd543690dafadb60499de772b4271ee
SHA256

e793a31680c74f8e4f537b773abe32f66a95554fa85d214701b87b6a47ac99be
SHA512

25af336b4aeb468a7713c77d00445952e673d34a3a5faf951df424cd46ce0f914aa5dd06dcf7313d40a99057839d0962b7360debf205cbfe4fb29cac83e2d38a
SSDEEP

12288:qQJ/Oyl2RK9MUHnmC9LXSNIh/OCQUKFGmw:qQxOrRK9MM94Sh/O7JFG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
379f9504ae3b572932985343b5167235_JaffaCakes118

Files

379f9504ae3b572932985343b5167235_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ