a27ba12bedfc224dc3cdc22a6371a93b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a27ba12bedfc224dc3cdc22a6371a93b_JaffaCakes118
Size

188KB
MD5

a27ba12bedfc224dc3cdc22a6371a93b
SHA1

abb663760a63761b1c689e7e3186e7be1d6696dd
SHA256

f7caa45b6932098402ff8248ca079930da776ece46fe346a2063fea22a41f41a
SHA512

715628258b1e0e2c992794d437ed06bf46b14bb172e53ea4b67a2f6ef9def54ca26280ad96c2b03bacfcdde3313e61fc777445a9b759b0239ce3769ee23631f0
SSDEEP

3072:MQWYAu1vWsaPxUlJmOkuxNQWX4orjH+WEn83/pri:PTvtaaXBr6yPFi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a27ba12bedfc224dc3cdc22a6371a93b_JaffaCakes118

Files

a27ba12bedfc224dc3cdc22a6371a93b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ