b8da5ffc7616e46543d811fad8b72b74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8da5ffc7616e46543d811fad8b72b74_JaffaCakes118
Size

234KB
MD5

b8da5ffc7616e46543d811fad8b72b74
SHA1

aa2adbcb2e0fb635ded5c13a0948770f18b52cb8
SHA256

9a49a1058d599097ac582c4ceace5bf406cbbead9b2f875a1a7f3394c6001674
SHA512

cfb532b85628eaf9775182e2404226699e63808387388b0c025282fcf4e47c8aaa719ea8f1081b6433a210fd07346cc71903289a40bdaa1ba26ebb5173b004d4
SSDEEP

6144:Z6OiUyzD0zCFSH9pyTuLNQAHe8fAIwgw4lAAx9BhmroAiHk:oTzgGFaVQAHe8fAIwgw4lAAx9BhmroAi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8da5ffc7616e46543d811fad8b72b74_JaffaCakes118

Files

b8da5ffc7616e46543d811fad8b72b74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ