72f728c01374e005a2f851bdee62b164_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72f728c01374e005a2f851bdee62b164_JaffaCakes118
Size

447KB
MD5

72f728c01374e005a2f851bdee62b164
SHA1

cbd4e4e30f5160680961056420365832561807da
SHA256

5b6321400cfb0cb91ffe790b1ae90fa44f03016afb7a1300ed9259f55e96bdbf
SHA512

4da546affe5d070c75a46f710d7fd0caf43b01c03ad4e21b948023a9388a6056d685119311cc1cea0d8dc284c33682a8c2020ded9a52ebc47729462dd3aa2988
SSDEEP

12288:BfZJ/bKg7OjQ0eii7T3TM1IBzyJjqXO0TvXZxKk8tNf:5r/2g7qf7i7SIBOq+sZxKF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72f728c01374e005a2f851bdee62b164_JaffaCakes118

Files

72f728c01374e005a2f851bdee62b164_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ