8b8fb78d3111bcfe9ecacf3e6d893537_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b8fb78d3111bcfe9ecacf3e6d893537_JaffaCakes118
Size

775KB
MD5

8b8fb78d3111bcfe9ecacf3e6d893537
SHA1

b32729ae611966d25e09a0e31e5d5d8d12d25593
SHA256

033306c662e58c5f4dfd6165bff9f8db0a6177f8c180145e4b3e89463119ef07
SHA512

b58af93fd1a37fa9b68791c781fa1b66e9bf268b785e75f31de3609f01aa441f284d73c8079e8ec34ecb0086306a74655ffbb2b6e9b7de925482b28328fe25dd
SSDEEP

12288:vXnfpMjLQjL0t2yySBZRimk4fUD3NO8R7I93zbbWWDEpUc:vmkUtTySfUmkIUbTm9M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b8fb78d3111bcfe9ecacf3e6d893537_JaffaCakes118

Files

8b8fb78d3111bcfe9ecacf3e6d893537_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 768KB - Virtual size: 767KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ