78bff1e363c0a61d0da36c4c03991a97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78bff1e363c0a61d0da36c4c03991a97_JaffaCakes118
Size

632KB
MD5

78bff1e363c0a61d0da36c4c03991a97
SHA1

dbdf30e8cfbd839969060ffe266f85fab0712334
SHA256

917eddc6b0e85ece9146f61f79912c613ed2efbc51be90bc49568bc61b8951ce
SHA512

04a801e6ac53ec3732935c76146fb637d1b21a66132a42181733f48ad0a2d12d8edb86ea12d2f4be02051fe97e099e2f29623a3203e8d64644a60bf6bdee06af
SSDEEP

12288:zfwWCrRG+7aNcHAD8VzVYvXoflWdPREISEZNfx7N1oGKsET:2RUK+2CXoflgz3x1ob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78bff1e363c0a61d0da36c4c03991a97_JaffaCakes118

Files

78bff1e363c0a61d0da36c4c03991a97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 620KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ