b4b4d0e064937dac2be5021915e74f38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4b4d0e064937dac2be5021915e74f38_JaffaCakes118
Size

1.1MB
MD5

b4b4d0e064937dac2be5021915e74f38
SHA1

1950edf8a0cf701da3260622021217e51c955798
SHA256

8b7ba73194fdf5e910a47d5543ddcf4b45e74ab7a57871948a8f1601e9636d31
SHA512

1fffb5e41f594a0a168993203e8d51bdd8d40c0f67760d998b5c4c25293492b83adde8e19445e633fd8a48fbe8ada64707bc7b1498ca16cb04c7996cdddf0cb1
SSDEEP

24576:rbl0kI7LgLRtYFQCX/LMNX2EX7UlB3k2gc2bZjhoL:rbl0kWL0YKK4NmcoU2rcZVoL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b4d0e064937dac2be5021915e74f38_JaffaCakes118

Files

b4b4d0e064937dac2be5021915e74f38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ