b896f63a3a842e2ca679f8f85c182a56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b896f63a3a842e2ca679f8f85c182a56_JaffaCakes118
Size

349KB
MD5

b896f63a3a842e2ca679f8f85c182a56
SHA1

673b7d1e014cec5df009ad5d150552fded985adc
SHA256

da2f28066626c5233467f5cffeba4c770bb1e2d4a0ab70d11dde42051ab4a547
SHA512

8beb75a09aeeb7b7a33526949c66062540f05fc1e91888d0e8e5de7a45bd015f98d32e9426d2d0ab7917ef989f7f0b39e74b9b2e5384fe2faffcc3ba2b7f20b1
SSDEEP

6144:s62wlxDMAYloj1/L8YEAQwgG5hYPcR4RcpsPuwe:PvDMAzjN4YEAFaWOcpsP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b896f63a3a842e2ca679f8f85c182a56_JaffaCakes118

Files

b896f63a3a842e2ca679f8f85c182a56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ