b338921fa1a568e1b10b9908c8f39485_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b338921fa1a568e1b10b9908c8f39485_JaffaCakes118
Size

640KB
MD5

b338921fa1a568e1b10b9908c8f39485
SHA1

f72f0aad34e1ba5170cf00a78ae579336a719091
SHA256

3bfd35e3f14801cc9a0dbcf06b2eadd74efbcad7da24090ddb3e4e95e7fec546
SHA512

f2cc83b12136a7c2e33461b67166e8629b61351cd0f4216d7105394453e8d7be861f3f595d204d355acdf2d5d1c73c77a880b4a036a228c7541c7d1a9149a5be
SSDEEP

12288:vYUAGyO8Gp0wjFs0Ja7caSpMKbvnAIvIVWlk3MvJ/ZV9:u1Y0wBs02GMKbSVWlCa1Z3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b338921fa1a568e1b10b9908c8f39485_JaffaCakes118

Files

b338921fa1a568e1b10b9908c8f39485_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ