8b693cfc3b34a5d6ac2fae436197cfc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b693cfc3b34a5d6ac2fae436197cfc3_JaffaCakes118
Size

242KB
MD5

8b693cfc3b34a5d6ac2fae436197cfc3
SHA1

dd21928caef00fd03ec87b0734a123ac8d0567b9
SHA256

36618cf9a09f16d88a993a36e5f796fc643acad7c4d17b060c942aaed381b7cd
SHA512

d7065d3cdab617974dab23cde98bbab0c62d424b5e74df241dc5346984fc3a728a157b86549d22ac0a31a4c15744ef12b812c42d2f75e037fbe38596cff83e39
SSDEEP

6144:C5fCX0xE7Ay+lHy1ViasKYOEP5mSsHNb4SEH:OCExT1YngX5okr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b693cfc3b34a5d6ac2fae436197cfc3_JaffaCakes118

Files

8b693cfc3b34a5d6ac2fae436197cfc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ