72e3c3dc76b8b67dbdcf40def58e152b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72e3c3dc76b8b67dbdcf40def58e152b_JaffaCakes118
Size

320KB
MD5

72e3c3dc76b8b67dbdcf40def58e152b
SHA1

850e14d5883f93d5110dbe8757c7ee0dcd758b66
SHA256

ffcbfb157c702aa8f570f0a0b9f63bc315b165821546a10961e432336bc85fe9
SHA512

b255eacb16cb90202b8d12d86a21284f18570cd6d297a934c14b8c543f443638e7a43e0c570598abe592ccb145a23ee50930ae25817033c0c663607a5ccf06ae
SSDEEP

6144:jcMKfHPxseqRG7g/KRi3MyYBV0bF8TZj44LNIGbmzw2HrxDW:jcnPq67dkduW+FM4erdK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72e3c3dc76b8b67dbdcf40def58e152b_JaffaCakes118

Files

72e3c3dc76b8b67dbdcf40def58e152b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ