66086fc24443a4f23c77134b502a1ea3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66086fc24443a4f23c77134b502a1ea3_JaffaCakes118
Size

523KB
MD5

66086fc24443a4f23c77134b502a1ea3
SHA1

9075eefaa2458bc0cdc92497752ca3d99f0abf4a
SHA256

f527faee7aecf7b143311ff17bf15c64412069e80e83867e576195311d83e1cb
SHA512

c9e991c8b10f1dd79046603a9bc9a41d065a24cd4c8aba3244a43a5cb450bcd406eca520a5099c7a4ddf77bb907962850f3f822b8d2016e1a4e42d90ce20d36e
SSDEEP

12288:6XwV1PE8eDM/w9zx0WlLSfJ5Fdhhyak0Ia7B2L:6AV1s8ZuzJlLSfJndhhyiI62L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66086fc24443a4f23c77134b502a1ea3_JaffaCakes118

Files

66086fc24443a4f23c77134b502a1ea3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textxc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 497KB - Virtual size: 497KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ