781501c4fd8ff10bce2e51c11fc5a8c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

781501c4fd8ff10bce2e51c11fc5a8c5_JaffaCakes118
Size

3.9MB
MD5

781501c4fd8ff10bce2e51c11fc5a8c5
SHA1

283df3bd29fb44db1fd12dc31cb2239cae672df8
SHA256

8b8bf0afe6ba9aa475e28e7b111d418613458b084393fbfd3a02a4424ec1a816
SHA512

281f93592af789e7d6e07ecb08de8a854187ddcc1fcc36f217bc30f991b7cf955becfeb328d1663a1753d266abf70602e5bb0ff75d500ebe073270de09bf2712
SSDEEP

49152:F86cTQHzgMkNaKbTVSttw6Rl+G/lLUlJXkK8/yb:i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
781501c4fd8ff10bce2e51c11fc5a8c5_JaffaCakes118

Files

781501c4fd8ff10bce2e51c11fc5a8c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ