8af807e3bb7ebb62b9cb17d237b6775a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8af807e3bb7ebb62b9cb17d237b6775a_JaffaCakes118
Size

665KB
MD5

8af807e3bb7ebb62b9cb17d237b6775a
SHA1

b59155ec49a8d6919d554cc86940d8be3dcc55c4
SHA256

5c17ad97be2e3d64846a0150594f54a6fc033e68b511a0a2e7fa0469306745ec
SHA512

b1bed0014a0e6730a3f56aee9754fcbf6cdca5190e815b9283489ff6302ccda03f337e474e660dfa5dbd417190be4405f64389042a53e8a77c1768954cc8e5d2
SSDEEP

12288:t2gzLNqGFtvuUkAThUBES9NFC+XGTiFlz9T1yV4A0pOTI:t9xvAATCBEUrCzTi/zqV4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8af807e3bb7ebb62b9cb17d237b6775a_JaffaCakes118

Files

8af807e3bb7ebb62b9cb17d237b6775a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ