787989efd0d1669cf89a85667efd8a2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

787989efd0d1669cf89a85667efd8a2d_JaffaCakes118
Size

108KB
MD5

787989efd0d1669cf89a85667efd8a2d
SHA1

d6d97e8197e986f6a12034981a65779c9cd82acf
SHA256

5527798366323a62068ba5993b494b9e057b0a35099779a9718f9e07cbf2cfc7
SHA512

45baafd844dc89391e759045732c5b6028e4709e0212639ead39d4e752a544c5443d011cecf845397c57b689faf9f86878a1303706f4fb9a1860080d573508c2
SSDEEP

3072:EnTiChSC3M207UO6HTH4lpHu/LH7Lm3qA:4T5g7v6jApO/Lqq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
787989efd0d1669cf89a85667efd8a2d_JaffaCakes118

Files

787989efd0d1669cf89a85667efd8a2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ