ba21dcbb6a6c8e124a1e898b084eb0d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba21dcbb6a6c8e124a1e898b084eb0d5_JaffaCakes118
Size

693KB
MD5

ba21dcbb6a6c8e124a1e898b084eb0d5
SHA1

9f51aa60a2735f41507e44463a6c4e82f6593948
SHA256

b5ddfc9706ef5787724f899aeffb1cfd7a67ffeb9980cd2289f856471fec644e
SHA512

0066db2dcf62493c8d8b2859ba043f43d6179cd2b674312f2585fb8eedbc50565b2fa284f75fb5b0d8553d811bd96721c24e0d0297b72301c679889cd6723499
SSDEEP

12288:hxE3KP3wBBMhUar7Wb4BH+mncT8do17GCBR6A2yjI3vS28L:hxDSarpznc0qVRFjIj8L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba21dcbb6a6c8e124a1e898b084eb0d5_JaffaCakes118

Files

ba21dcbb6a6c8e124a1e898b084eb0d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ