47a6a096e44720cf6fed88b117cd10fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47a6a096e44720cf6fed88b117cd10fd_JaffaCakes118
Size

469KB
MD5

47a6a096e44720cf6fed88b117cd10fd
SHA1

79404b7d9cea558b1f5724513706f802b89a7779
SHA256

4735435b7cb09edda241d6d2bc20ecef90f298cdf37d07a03b35014e0a5742ac
SHA512

f6b333e9ef7ee18039339b6c380ebfbbcf2114825a8dce4fbec5a48d01417e721c09558d0f09ff2dee04aa6214c204ac4821ded183c4624991502f1a319e3353
SSDEEP

12288:gqzwOjveKruPFRUNJRHfKVyQAmAEA22wSLwrFTctzHhKmTkVSUD1Xcs:gasVPA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47a6a096e44720cf6fed88b117cd10fd_JaffaCakes118

Files

47a6a096e44720cf6fed88b117cd10fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 467KB - Virtual size: 467KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ