bb3ce8a4b8d824717087980c67f7a441_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb3ce8a4b8d824717087980c67f7a441_JaffaCakes118
Size

1.3MB
MD5

bb3ce8a4b8d824717087980c67f7a441
SHA1

e6f0e156d317af1806376798ab03e25b8bfe6a9c
SHA256

4815957e72ccf81bdfc103a369b110e9c70e90119f3560aed5a5340f2d8a746e
SHA512

0f55526f89ac9ffc67c59461d30f96d61cea08be2088e4cecaa201cfb215dd93dbc1e6e256a0cda00f94c294c7ffd961363f814e0301bc1881222833952d1021
SSDEEP

24576:eahgygU5vH1OQFdAThuXgCg6osvAwr7kBk:7mFB6aT4gCg6pvAwr7k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb3ce8a4b8d824717087980c67f7a441_JaffaCakes118

Files

bb3ce8a4b8d824717087980c67f7a441_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 920KB - Virtual size: 919KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ