89284a9ea38a11a2b1aea7df49d16985_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89284a9ea38a11a2b1aea7df49d16985_JaffaCakes118
Size

500KB
MD5

89284a9ea38a11a2b1aea7df49d16985
SHA1

519759606837f4a967352862927d9f6675ecccad
SHA256

e1f08a24f2140ff4091c4c371525bba12ba4452c2ac360e33de95ab7073a2c01
SHA512

994bbce96f4fec08ed02b5498f5319c7dc1f78b777038caf8aaf155d66eb9acecb15dc4137a004b8f62ca3f95536fde45ca0e1f6749f0ce490518913883d61c8
SSDEEP

12288:7qjhjP6eP9K01+yvJjPMH49iiE1joO3JemT:+ljP6+NB7MY9JErZX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89284a9ea38a11a2b1aea7df49d16985_JaffaCakes118

Files

89284a9ea38a11a2b1aea7df49d16985_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 498KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ