732d18cb5e3846dda9308f6978fd5de9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

732d18cb5e3846dda9308f6978fd5de9_JaffaCakes118
Size

424KB
MD5

732d18cb5e3846dda9308f6978fd5de9
SHA1

eb679d14ec93fbeeaa5ddfcfe37907ad9c47fe00
SHA256

7a11209284f57ece8af43d10aecd41095011cab8d83cb76f409e9caaf9acf441
SHA512

2e1f5468cc1b0b940f81ccc3fa3550a0d447bab661c16b3af735c1acb29e21e877a6ee1752576cf3ebd578dafce35b62d88bb173fc7ae1108c591f0f4b4af266
SSDEEP

12288:In1MoCQnJdGCVkKNTVVsEu5hUSh1Bvn33BDR3fGxVa0fyn:IhCmRcPZ9n3332

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
732d18cb5e3846dda9308f6978fd5de9_JaffaCakes118

Files

732d18cb5e3846dda9308f6978fd5de9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ