722bde6a8fd29bccfd2cbb1870969eef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

722bde6a8fd29bccfd2cbb1870969eef_JaffaCakes118
Size

230KB
MD5

722bde6a8fd29bccfd2cbb1870969eef
SHA1

990905550f19802f32070ec1f6f5fc5627de4329
SHA256

f131c1d88d23c451402a40a9db549dcf8f019955f548d20c554fd81498ccf1dc
SHA512

3becbdb1918992eb770d64ed6baf43ea7d2c49bc0c7e42be586ba78dafd30926963ecc1937f841fbad146277f53fd43487fd3ebca6c11a4209211f6bc08ea596
SSDEEP

3072:EkmWEtHGMB8wIfcSdRpMNTh+8m1c99w400Oxbfwe:EkmxtGl6D9yX5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
722bde6a8fd29bccfd2cbb1870969eef_JaffaCakes118

Files

722bde6a8fd29bccfd2cbb1870969eef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ