65585198ebd4fdfb7bcfab5ec48aaedb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65585198ebd4fdfb7bcfab5ec48aaedb_JaffaCakes118
Size

774KB
MD5

65585198ebd4fdfb7bcfab5ec48aaedb
SHA1

34c18f8e18fdd6b30f80220fa02049011922f4df
SHA256

289672c4240951a1feebd7b328f05ded88e3d27b8da51d717813eb1193a6963a
SHA512

faad245651dfe7c1b384cb70f4cc83f9c50802e23718a821c9a1741a0172bab818273ec00b63485bba1aa2722402f9aeac986b897bc36eaced400b8e99e41329
SSDEEP

12288:D7jRtcVzj2FuufJv9ADOFnmlLoKbFS52b+C4FuZY1WG/fJyJo8YqpjefOSwxY/pz:OruDM8zGnSFJ2KYS1v4ot

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65585198ebd4fdfb7bcfab5ec48aaedb_JaffaCakes118

Files

65585198ebd4fdfb7bcfab5ec48aaedb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ