694378c2d93acc96f54441a43ed0e394_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

694378c2d93acc96f54441a43ed0e394_JaffaCakes118
Size

664KB
MD5

694378c2d93acc96f54441a43ed0e394
SHA1

9fd784e7e1d4c2b88b20e3c9ca7e080274ff0d4b
SHA256

9d27de74033b238bfa28660e9ef62471146b803e733fa3a68c56665f6a305a3f
SHA512

2bab7ba76fa1196dc7594c6809696c4d7210278dfed1187d1be1e1ae73f0137563e14af545a026f6079db3942e20f672b7f7da6316deb3d8cdb3ad2990d2adcc
SSDEEP

12288:6u4XVw6+E4ms8JynqkCNJzKQ6jQjuFdKZqiwidxBuKF:6u4XVQjmbLzsQ4iwidjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
694378c2d93acc96f54441a43ed0e394_JaffaCakes118

Files

694378c2d93acc96f54441a43ed0e394_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 588KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ