a4533871afb34a19b5d4cf5054a2649c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4533871afb34a19b5d4cf5054a2649c_JaffaCakes118
Size

321KB
MD5

a4533871afb34a19b5d4cf5054a2649c
SHA1

af9b7bf9f8a139b26f747d69b5a6a7ec9f4d5f95
SHA256

57dfa635bd25c495ea9e1ea6a4f0d21725fc2c0aaee11eb3384eba434dcd9103
SHA512

86960d455252bc77a349bf1af707a6fc4c6b7187b41cf2c34e27ba8badc1b1ac55b30b824c463bc13864a47d8674764daa1046725e17208a3ac064fe3b18eaf1
SSDEEP

6144:f3cFZT8qbTR7SquD4L8vioH/X8i9DLnHWcefjVo8bS5V5AY2HL:f3EZwgVxGq86oH/MKvnolg5xo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4533871afb34a19b5d4cf5054a2649c_JaffaCakes118

Files

a4533871afb34a19b5d4cf5054a2649c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Imports

mscoree

_CorExeMain

Sections

.text
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ