8cdd071e0ffa32e7fd2ed88866447d65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cdd071e0ffa32e7fd2ed88866447d65_JaffaCakes118
Size

1.9MB
MD5

8cdd071e0ffa32e7fd2ed88866447d65
SHA1

8968308e8696a213d369ac340d2e8f6b96b8dafb
SHA256

476869f322c8058431a2441d3c62f4e32aa7db12f764be07ea85fe966d15c94e
SHA512

a160ed568f840882cb04275beb2c0a71d42b53a903b9d8fb5e55a9f4d301d8fe5b67e62d81a13fd1b3a6696f212dc36a9f09e14893d0f1cfec43e99e6fe895da
SSDEEP

49152:kDQJS99uZPVXY0lG7RnvhrQDzFj1+zTrwWJrPIL4vJ:G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cdd071e0ffa32e7fd2ed88866447d65_JaffaCakes118

Files

8cdd071e0ffa32e7fd2ed88866447d65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ