71f1c81ae83010755cac537a7fa19303_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71f1c81ae83010755cac537a7fa19303_JaffaCakes118
Size

444KB
MD5

71f1c81ae83010755cac537a7fa19303
SHA1

2327da2df5aad70b196fc5b2ab57abc50089db4e
SHA256

f3699abc81169265c47c65e1cf4c264c162f29e7d9250c6ebe134808ce670868
SHA512

f5e1ee7d5d1a35bf543fdfc5bba09f599b02f7e88118a40d537a0938dc37a06d3a09af3f1867ede6e3e3725185d4ecaee0e5705856cee277f4ff0d1cc2b1609d
SSDEEP

6144:C22yb4ZQfXlbEN4qG6LSP2Z/y5lhQ/RPkZLI95fOnYz:yK4WfVbEN4qt+2ZUlO5Pw0950Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71f1c81ae83010755cac537a7fa19303_JaffaCakes118

Files

71f1c81ae83010755cac537a7fa19303_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ