8dc6ab9a9c85cb3e91ea9c0fc4cb8220_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dc6ab9a9c85cb3e91ea9c0fc4cb8220_JaffaCakes118
Size

112KB
MD5

8dc6ab9a9c85cb3e91ea9c0fc4cb8220
SHA1

5b90136c9f515754e3f2f64dc51ad768813ca149
SHA256

4a7f7fd15ece5eb6f8fe097f787d87ce886539a1961f09e3d6a82bfae6d0b2aa
SHA512

5154d0c3ede709d69655f25d193280d3796b7252c679466b151dcdc89024d29c03a3fc0673c2113e5868453ea401334f4f6918f4b9f74064ef53414b2cf3edeb
SSDEEP

3072:yy7dX5hww5v/teY2hVP4jUBtGLw6xs2Yq:Np6gvcfVP4jUCLwPPq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc6ab9a9c85cb3e91ea9c0fc4cb8220_JaffaCakes118

Files

8dc6ab9a9c85cb3e91ea9c0fc4cb8220_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ