66b1d2378dbfbb5e92a14391e354d5e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66b1d2378dbfbb5e92a14391e354d5e9_JaffaCakes118
Size

82KB
MD5

66b1d2378dbfbb5e92a14391e354d5e9
SHA1

a5d9135780d22136eaf41e12bdcaca2571dadbb9
SHA256

0f0330315e2293090a7b461b02f93b232c43efbf97e02dfa8ab2c06459ff582d
SHA512

8ad393f2d572edf775465d2baee4aa04eaa7bb25d4813e3640d93205c884caa072e80658ac6f6dec45c1f9984372d3e3322d71e8fbfa5789c73abcd93f90a0c8
SSDEEP

1536:DcsX+pY2TrQpo9LwwjjG07UJmsCXbjYbcV59MrFS7AOaD:ozTrGo9LwwfG07zjBVYk78D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66b1d2378dbfbb5e92a14391e354d5e9_JaffaCakes118

Files

66b1d2378dbfbb5e92a14391e354d5e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ