94d60ec865059d975547f927d94cb90c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94d60ec865059d975547f927d94cb90c_JaffaCakes118
Size

208KB
MD5

94d60ec865059d975547f927d94cb90c
SHA1

636d6ca41c163985fcc0d975cf87fa6d77700873
SHA256

29f6bebd06df5690a727fd7cd081974a46e32e6fdb6b41ce7f59c4a4a4b67b15
SHA512

00e7d9c3ec4f59c8b75fc83691cf01d1b4cd7ebc75a37d7df60a40dcd12c06e7f2308233497fd41e3851429fc48f29c7225b63ed3812d18b31bae3f945937b1d
SSDEEP

3072:JO+bY++73VQdqPg7WqD+NhGJZstCVH9xGSp+BPq19XAHtUcmzY:MWWzcJZs0d91WPquUcmk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d60ec865059d975547f927d94cb90c_JaffaCakes118

Files

94d60ec865059d975547f927d94cb90c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SimpleDetector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ