83d979bbbf2dbb4914aaedf5fa5e4cd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83d979bbbf2dbb4914aaedf5fa5e4cd8_JaffaCakes118
Size

1.1MB
MD5

83d979bbbf2dbb4914aaedf5fa5e4cd8
SHA1

8622bff19d4dbee74043e00b00822e8b18d5f2eb
SHA256

2502d1b127a157236452fc3d227dbb26436cf3f25803f42645872483269709df
SHA512

6c5540b49793b1360e417f6757c245485b6723ffb0932c0228b62f353c996280123be937a6ef0eeb811937722eef81d89dbf86f5a5f5f67352ce6f5bcdc9f502
SSDEEP

24576:X/556GRwTXdfepmW5Ochghnd13jtpqQ6zgW7z7/UtB5G9+y1:P5564wTYmW5OchgV73jt5SgWHjoB411

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83d979bbbf2dbb4914aaedf5fa5e4cd8_JaffaCakes118

Files

83d979bbbf2dbb4914aaedf5fa5e4cd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ