636d5c1923051a8f6bec05864cd0d44d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

636d5c1923051a8f6bec05864cd0d44d_JaffaCakes118
Size

34KB
MD5

636d5c1923051a8f6bec05864cd0d44d
SHA1

054387fa4eec9c0c643f2a61c8edf4f0943e90f6
SHA256

f38e6a5ee7f0ceabab4044f6f9a311098486fb84f7661dc7a78e980992649a72
SHA512

29c5a287af0b625d1712adebc490e8d9945eacf801a14a4928a455083200aef36b583ca1d5f5f6a35aba450fa9962eb5dd77dad784143afff50db6051e7987dc
SSDEEP

768:AxFNnTG72tqCxnB6OUApjjsmpM5Hjuy/c:Qg7VCxYOUypMVnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
636d5c1923051a8f6bec05864cd0d44d_JaffaCakes118

Files

636d5c1923051a8f6bec05864cd0d44d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ