393160d319bf874fe5f288a30749114d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

393160d319bf874fe5f288a30749114d_JaffaCakes118
Size

535KB
MD5

393160d319bf874fe5f288a30749114d
SHA1

442e6603bd7cb7f65425128bc2cf8e0a73bc3a0b
SHA256

c0b35a83933381b036cc7f327410271d980d983343df6be03e930836a586f364
SHA512

0e6114fa596a9b58ebf1c355ced87938b43e273df12eab1c2286c0946fcbe09bbac931a64ec7e49f71e7713c35d46e77180ee9a01f9b990bf74c86cdee894535
SSDEEP

12288:BrIHz4SrFoBnH5TLr37FwRJot3jKpZSoqul3Vo0N5sL46k:CHESYZLRwRnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
393160d319bf874fe5f288a30749114d_JaffaCakes118

Files

393160d319bf874fe5f288a30749114d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 533KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ