77cf55faa3c64e45c16ae435c8911db7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77cf55faa3c64e45c16ae435c8911db7_JaffaCakes118
Size

3.9MB
MD5

77cf55faa3c64e45c16ae435c8911db7
SHA1

6835cded0aedceae1f142577a023fa77286bf3c9
SHA256

946ab351cc1a3baa6b04279f2723a6e2e1a5c447ec4accc4b1cb45802c47f792
SHA512

e1ec5bdc442900a6bd250050de7ec98cffc0e652eb02ee10d667005dfc456632e473fa1d7a72720908c986cb6a1e8949b8b5f4409e7775640f8edd033e75e85d
SSDEEP

98304:Q7up9kHVfiSExFEYExgR+R0MvjKtlacqDtfZYxs/g7:RxFE3xgR/sGlacof5o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77cf55faa3c64e45c16ae435c8911db7_JaffaCakes118

Files

77cf55faa3c64e45c16ae435c8911db7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ