37b05ef78bb794bfd340da135c134200_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37b05ef78bb794bfd340da135c134200_JaffaCakes118
Size

286KB
MD5

37b05ef78bb794bfd340da135c134200
SHA1

ad4c58b745a28f3f946fd26b8dc7b4fedd6e3c00
SHA256

5801963db03b4a1ecfd8bfc70f8ebf06480724cd92186d9b09f907bde9d70f55
SHA512

3e532bcd807b901ff6d3ac0e05e5ecabedf775cdfea5f0d280ec5ab193c26f46abad11ad5f36ce10a52da8133f4eef95781e8c5318af874595d1aa8f803375eb
SSDEEP

6144:Bo/arUr4WqivIgAvlc0KZ+Y1NIOGU5AYuHGFf4YDybho5F0U3D5LTSyQ:yJpGRGF4YDy5k5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37b05ef78bb794bfd340da135c134200_JaffaCakes118

Files

37b05ef78bb794bfd340da135c134200_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ