879e1c7c97cc20276f742b11223082ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

879e1c7c97cc20276f742b11223082ad_JaffaCakes118
Size

137KB
MD5

879e1c7c97cc20276f742b11223082ad
SHA1

f18776eb548922b38c3a05cba24e841e0f6dd236
SHA256

3e9287e0e8422eb568f55d810239d5f9fcb47c438ae6138956c93de8d13ed56e
SHA512

11ae890a4abd18a3b748dcbc19b7d8393c0ec52fa9d8c2b75bb8cf473724c2da8243ccb3357a652ea5f717e253961c7adbdb7f6181189162ac561bcb65963697
SSDEEP

3072:cChLv0PEHhSSm3ILKWWzMMRrAvgKRdUcQnyuYqLkIiGzNd5:czMHh633bMMRradUTyVqLkCJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879e1c7c97cc20276f742b11223082ad_JaffaCakes118

Files

879e1c7c97cc20276f742b11223082ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ