af7b67df982d2de9ab1be8f27ec4d508_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af7b67df982d2de9ab1be8f27ec4d508_JaffaCakes118
Size

1.1MB
MD5

af7b67df982d2de9ab1be8f27ec4d508
SHA1

37d6b13915f6573786085c5a2588f85600c868c8
SHA256

f400eccedeb28faa457787b30c0c92e67da153e742678783df90b9f247531a4e
SHA512

587bb416ede60a77370d2a8e7b8b31f8e5659e03e8c4866789b0fe6f35f5afbd7eaf46efd2750eb809aa8410bc59fe46fed9a0b07f8be2971f9c2cb33449c5fe
SSDEEP

24576:YPWFB4Uab66CvZ2G6ZbBow0KCEV3n/hhKpHREHeYj9cv:gWFBd5ZZ2G6xyw6I3/0uHjCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af7b67df982d2de9ab1be8f27ec4d508_JaffaCakes118

Files

af7b67df982d2de9ab1be8f27ec4d508_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 958KB - Virtual size: 957KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ