b29b7ada55deaaf0f41911f9f570c942_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b29b7ada55deaaf0f41911f9f570c942_JaffaCakes118
Size

2.3MB
MD5

b29b7ada55deaaf0f41911f9f570c942
SHA1

55094ef07eb8b5b7889b03b09cd850a463976689
SHA256

f6e23cfc411548e478e54a50b503cc19806ab1af02fe81ed2245ea10b9c79209
SHA512

64f25552b3af263b5b9cb3646970a9299464bb72f76670bb36991a08401634685f6eddc2f928e37c09e9313a66f40ba290d74f05bd161e096f6f9023cad2f3d6
SSDEEP

49152:ja9mRDDmrw/zv9wKTLe/vLHZfFsHF59BTtjvV02/NhD:ja93U/zRLmzpkBtR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b29b7ada55deaaf0f41911f9f570c942_JaffaCakes118

Files

b29b7ada55deaaf0f41911f9f570c942_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ