894ae182788f49cc7f59e8c14efd11ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

894ae182788f49cc7f59e8c14efd11ee_JaffaCakes118
Size

3.6MB
MD5

894ae182788f49cc7f59e8c14efd11ee
SHA1

a324d3291b4018a0d403c930d6384f8debf7ee5e
SHA256

c6def0230cb43662a1efb2a546049e11d79cc366944e1c8d8faea6e51e1bacd0
SHA512

f54a77a74416c8ee8047b7b055e7c46b6ffacf8e3ca26ab73d6f527f679703c0c9450d35dc0106fbbe8f1f1ebc84241156c6149862225ecc11391b45661a6d8b
SSDEEP

49152:z5mKAK3mPgkDixlTlG1aPQrJHasY6DwOBfrnvV7UeWtkiA:UriHXvG1HYiwOBpIeW6n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
894ae182788f49cc7f59e8c14efd11ee_JaffaCakes118

Files

894ae182788f49cc7f59e8c14efd11ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 992KB - Virtual size: 991KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ