c0b8cd7e7a088d690ef7ed035cf860b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0b8cd7e7a088d690ef7ed035cf860b8_JaffaCakes118
Size

424KB
MD5

c0b8cd7e7a088d690ef7ed035cf860b8
SHA1

a5de2158888d11b4dbd301d33bacfde509d0b4da
SHA256

0d93883490356956fa9ed2bbfebee85ef8156c66ebf53e2403d540a0db16e3ac
SHA512

46d1258b53f75faefe714d8f6fa368052ec25a34201d220adb9f4dc315b0313b2e6e3d452c1a900c7e98d11b687e867b75e09eacdfe882457d30bbc5be3f5f6a
SSDEEP

12288:Tjs2iCxCgX/lWGlnK8lemiquvFSO2abcvc0Ry/N4:Xs2xCgX/EGl7lerVFSHay54/N4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b8cd7e7a088d690ef7ed035cf860b8_JaffaCakes118

Files

c0b8cd7e7a088d690ef7ed035cf860b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 412KB - Virtual size: 409KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ