72ec8c67df38944b4766cbc6f5ffb8ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72ec8c67df38944b4766cbc6f5ffb8ca_JaffaCakes118
Size

1.7MB
MD5

72ec8c67df38944b4766cbc6f5ffb8ca
SHA1

8ae019a9ed557a134510c2bb25aca904f1f408d4
SHA256

9d27e316dbba05e7e2d16f0c76cb5918e6c0ae2818dd092a7200c5c39fbd3c63
SHA512

a287df7b275820f6340170235f79ea66103ff43786522d076cfb025edc44389bf4f11fbfde514a9308bd05deb51a8ef0f92337c0619a2b3d5aaaf8bc705a968a
SSDEEP

24576:IyOK93VJ34nbtMDIUEgTABxWAIfbubbDhCt6+:IyFY2jE2jysh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72ec8c67df38944b4766cbc6f5ffb8ca_JaffaCakes118

Files

72ec8c67df38944b4766cbc6f5ffb8ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ