a7a3624b0483d381f0d19adb417e8983_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7a3624b0483d381f0d19adb417e8983_JaffaCakes118
Size

93KB
MD5

a7a3624b0483d381f0d19adb417e8983
SHA1

354b396cfe51516230d5547bc9600d85ff9583a6
SHA256

0718c205589dfe1a39c2bb6d226b6d88100d43fb1f2ada7a04f76a87031b6693
SHA512

100c79d61f17cf8959f7fd13b513c64e77bcbc3efb0493f9c0f7784b4a7ccf7f078722e8f01679fdc513281693908eef5fee8f32f4b5cb563e1e4eb7d2c23752
SSDEEP

1536:jM09SIxKCtYwGFJYk0DHA1gNJl1Sqn8+SLJAnzYfAsT4wb0ib:g09lcCtYwGF6k0juC+TLgUDT4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7a3624b0483d381f0d19adb417e8983_JaffaCakes118

Files

a7a3624b0483d381f0d19adb417e8983_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ