88b66c0cd5936667e28b7ac82cd3607d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88b66c0cd5936667e28b7ac82cd3607d_JaffaCakes118
Size

740KB
MD5

88b66c0cd5936667e28b7ac82cd3607d
SHA1

60f8db71cdb56f2c805ac8c9bb11b46813a78023
SHA256

ad7db5fa8a98ce1628a469f39fef785c062083736f04b909b49453e5897d1c2f
SHA512

4a504e32973e644f990751cc289455afbc696f0ee1c05a2c4d3751c4f99fcbee9aea8c4a0c855bdaea71419a60464f518ae3fed6ec1134d4d8f183ef6deccd11
SSDEEP

12288:6nkEToSHMxTPfYujNCpvm9Z5QHW1IWXSV7PUaGTnF7iEoaSrY8t2Sl02ukAEmHNl:6kbSCLfCU9Z5QHW1IWXSV7PUbuvS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88b66c0cd5936667e28b7ac82cd3607d_JaffaCakes118

Files

88b66c0cd5936667e28b7ac82cd3607d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

8"TA us
Size: 513KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ