873e3eea87857f8a3313d5fc18bfa81a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

873e3eea87857f8a3313d5fc18bfa81a_JaffaCakes118
Size

120KB
MD5

873e3eea87857f8a3313d5fc18bfa81a
SHA1

626b097024cbfd4fa5b3a4d86ab50b81ff8f504a
SHA256

07e38d0a7841054e5a77f70e3d8c626adb608b517458e13f444adbe2a21f2c6c
SHA512

12ca79295d30d0d30e13e524fcbd54a175f93b7b98629cbc788cbdd3d7c08a4b8d8abbe8c3ad97be2206c75db0b847c307c8f27dd3db785eae592c1024c2adda
SSDEEP

768:zrcYEHj0tUlBlBlBlBlBlBlBlBlBllAby80ITNuYN:vTEQt5JFN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
873e3eea87857f8a3313d5fc18bfa81a_JaffaCakes118

Files

873e3eea87857f8a3313d5fc18bfa81a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ