383a7aa7a3b783c6445045eb4ab35b9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

383a7aa7a3b783c6445045eb4ab35b9c_JaffaCakes118
Size

92KB
MD5

383a7aa7a3b783c6445045eb4ab35b9c
SHA1

c2e302de6e82ae233311da47913c1f9ce91fccf2
SHA256

04bb6509f0ceab60e73f268e8aa91f0b8893cd4675f6672cbb35619401e56577
SHA512

d5aeb7c779ee951d8803db2a17e4724cc7ae0de4b17689d39942dc5c7a72840e376b37b7bd8ddc9e1b5062fb9c32f5300fa0d18e23caf522ddefcbfc9cdcd0c8
SSDEEP

1536:f8tyysQL/2aoo+gUGOtwrrLFP2WU7lfEgvo:EtyysQ/zSGowrrLFXUpFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
383a7aa7a3b783c6445045eb4ab35b9c_JaffaCakes118

Files

383a7aa7a3b783c6445045eb4ab35b9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ