c0d34aa8f992de2069d12be6d219de0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0d34aa8f992de2069d12be6d219de0a_JaffaCakes118
Size

144KB
MD5

c0d34aa8f992de2069d12be6d219de0a
SHA1

d5ab63cec1c86204700809d8a58f9c612f40e172
SHA256

41ac0701d036dd01a7e09cebab556dcadacc43f837f6078fa033de6db796224b
SHA512

f8853fdebe53ed9edb4846db6a4e3985d992954571043d84f8749a56b7a6a14158afc530ef57f9db99a6a9d5430011e491dac8c4a315015b21e63038c2de90db
SSDEEP

3072:wdglnJ8HOhX2Zc5BBlnYIWp4DZaJCHJm:/8uFT5PlnYIWp4D2u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0d34aa8f992de2069d12be6d219de0a_JaffaCakes118

Files

c0d34aa8f992de2069d12be6d219de0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

:aM22F
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ