668349b0d1428d913fc8aa53434bf1d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

668349b0d1428d913fc8aa53434bf1d1_JaffaCakes118
Size

6.7MB
MD5

668349b0d1428d913fc8aa53434bf1d1
SHA1

0f0f2582a92c04e2aa5c576b1296e217f999f869
SHA256

42588219fe9f904c7596400c007574834405d275e3fa9e860eb23a9c51b4d1db
SHA512

8d82a1f0ffd54c14da767e8f5e6b4e1e31d1c95b36a0a5b39b961f6b7b7f6974468de3a610892a113bdcea8eb446b7fa3c43e1218a7dedd61af193e9cf245b40
SSDEEP

196608:bCI+ObPmuXV7bsgTFSwy2ojx2+0wi1zwSOh2:WI+ObeuF7guD8x7gNwSw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
668349b0d1428d913fc8aa53434bf1d1_JaffaCakes118

Files

668349b0d1428d913fc8aa53434bf1d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 737KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ