4027327b8b4b97d2c11fccf20e03a806_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4027327b8b4b97d2c11fccf20e03a806_JaffaCakes118
Size

192KB
MD5

4027327b8b4b97d2c11fccf20e03a806
SHA1

7bb636877f18110b8a0eb4dac656df1422f29621
SHA256

ce981ec6cf6aa229c4385ae0cd5df4d6a98af23b8d66fde48053a2156d80decc
SHA512

f3d106a21f642b0b48f44d5540e844f20f4e206d24eb9ba5a932d4c4ddc7a6d4519f38e0c3dcb1a3d7cb61e35cde6faaae098b9a69f8d42772da4f738230945c
SSDEEP

3072:SNjUcsSzJ3+G/NTKTjyXGudzXzW7oly9pioCMqeoRB:sjURwp+G/9KHyXGWXzE0y9UoXqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4027327b8b4b97d2c11fccf20e03a806_JaffaCakes118

Files

4027327b8b4b97d2c11fccf20e03a806_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ