b9e87d8141dab6735eb62fe414caabaf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9e87d8141dab6735eb62fe414caabaf_JaffaCakes118
Size

1.9MB
MD5

b9e87d8141dab6735eb62fe414caabaf
SHA1

a8853af72dd8ff19ad475b157fb1854ac67c610c
SHA256

d8216c05fec015f0597bde12a2b03d169cb9540c4642c449d5ed60de8987387f
SHA512

303e845bdc345f10606d4b26074e5730f0a41bc6c02284c3e769ec289b54bb078e8b8c8d37d1324ca8212499e1e3af778171928b502ae1c1c47241bf4e8fda8b
SSDEEP

49152:kfaKepI0QY8IvKEak44BMJHybgDA8iUcz2zB9kOPQ:GarePGMkqH7A8ZXz7kOP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9e87d8141dab6735eb62fe414caabaf_JaffaCakes118

Files

b9e87d8141dab6735eb62fe414caabaf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ