aba25449aef42761297f26cd725ec491_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aba25449aef42761297f26cd725ec491_JaffaCakes118
Size

976KB
MD5

aba25449aef42761297f26cd725ec491
SHA1

a85e598b8f9fd665d4d1e2e4d1b33df1a1a7a1d8
SHA256

d2752784133fd7e86d2a689c27a5161e8fa77b347d6cf08d12e64edc96e94bde
SHA512

f2c2bb46d91f239c8cbabd69e629759dc1bedd0c83e23ee4c5a9a043a61c8382e8e86df5dd021d5257af247ead3a759ffebfa43b240e3014866e3f26b862c881
SSDEEP

24576:S/fQZhoUFdFQB3HRiuRI5FQJ9x8U21yb/82cl5:BgRRjWQhr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aba25449aef42761297f26cd725ec491_JaffaCakes118

Files

aba25449aef42761297f26cd725ec491_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 974KB - Virtual size: 973KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ