386cc80956edb0fb6133782f51e3d5dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

386cc80956edb0fb6133782f51e3d5dd_JaffaCakes118
Size

50KB
MD5

386cc80956edb0fb6133782f51e3d5dd
SHA1

e8d32417817c7b5562ee0435242a29372e0773f1
SHA256

674828dd39dce94f7d47270030ec65b384deb2cb0bfa354b32cc84e08f2aa6f0
SHA512

21cce14bd92fb3b501405365077d5a41cd31dfff8cdc9ffafa52beffb483918e55dff01fc69116786d282667b3c865ded750d6ce1c39b2c9c3f32bac963a5959
SSDEEP

1536:j1pyefOKkFPVR5nHba9oOz+nJ0aDprq4:RQfKkZVR1uC1J1xT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
386cc80956edb0fb6133782f51e3d5dd_JaffaCakes118

Files

386cc80956edb0fb6133782f51e3d5dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ