618ad2940d87fe567dbfafa2f3523a24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

618ad2940d87fe567dbfafa2f3523a24_JaffaCakes118
Size

153KB
MD5

618ad2940d87fe567dbfafa2f3523a24
SHA1

adda871439d71c5f4c24aaf0566ebd8c9cccd477
SHA256

485c50a65bd3f9333cd18b36bf385bc200b24848dda00391f2232acca1de0c7b
SHA512

985ac5b8f51c66887c87b0951a894d090974a22a71ddfa3fe09ecf7436a9efcaf9d7614f1fe9163698a0f1619c0783784b697c3733f1979227eee3dc5e0b1407
SSDEEP

3072:98CJm9Xero7+0a+ZkMPToqXLHPB8/0dzSrIJea7jo3+Z:TmtD4MUqXLv6/04rmpjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
618ad2940d87fe567dbfafa2f3523a24_JaffaCakes118

Files

618ad2940d87fe567dbfafa2f3523a24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ