a8a1600c1143f86668ad0ccdb0299e12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8a1600c1143f86668ad0ccdb0299e12_JaffaCakes118
Size

844KB
MD5

a8a1600c1143f86668ad0ccdb0299e12
SHA1

49b6b14c171dc676a3898b3ba189b7af40d4afd3
SHA256

68bbfdf6a84b45d0f5117a797de000ee364715926ee2d20fe356e879ae479856
SHA512

7e94d5068ccb19ae309bea8bf19f7d8b3a36feeb3f4552f7deba6ed292a0b945d5d229c856d7f57e8b5f2fd680ef78a79ed3665e23e8d287fbf267f8f61ca528
SSDEEP

12288:SKJj/UmzcZVRegZ9++h/ics4Dtz/YNrlJcv7Af:S2/lSZ9++h/azcjA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8a1600c1143f86668ad0ccdb0299e12_JaffaCakes118

Files

a8a1600c1143f86668ad0ccdb0299e12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 680KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ