9480bfbe55c5a2544d5aaa9a5a2c6eb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9480bfbe55c5a2544d5aaa9a5a2c6eb0_JaffaCakes118
Size

276KB
MD5

9480bfbe55c5a2544d5aaa9a5a2c6eb0
SHA1

fec60de6e6566e640f02a4fc04479f5d17b102da
SHA256

15d10d7942177a257e0c6896bb0c46f10748c69e77cfb17e3a1b663370900bcc
SHA512

8629795ee6bae1a177a8585fb68e0bd5de2ce1e3ca7870556e57451bed11801f4b7f22fad437ffa478692c8add84de99dd600bfd1ffef7337cd5f0abae04e160
SSDEEP

6144:ck3Y4N6DnqbQEOmtcnXkJEueQIv/dwhT:1Y4NSqMFmWXVu2w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9480bfbe55c5a2544d5aaa9a5a2c6eb0_JaffaCakes118

Files

9480bfbe55c5a2544d5aaa9a5a2c6eb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ