c19a5b4b08b72efe36d3bddab48d92da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c19a5b4b08b72efe36d3bddab48d92da_JaffaCakes118
Size

403KB
MD5

c19a5b4b08b72efe36d3bddab48d92da
SHA1

1d77651cf7acdb686f6b4577c08acdafc2307d35
SHA256

35837a6d9f6c360ae72aabcb66b4ec6f2dc9195eb14300edc87802ed3bca8598
SHA512

fc425aab473e08c5ba81836839a5d46e8800523a5c2fb8a2f0c8ed961ec6b71968de366a0ac13c108428c7023281d0f41cee71e4c0241acd00dd2d2db4c53933
SSDEEP

6144:9Vn8Y/2+3x5spUN1yY0zyZZDWVd19rl2ss86pfRIoO1HCUeAV:958WhWmNEYOyct2z86pZIoO1/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c19a5b4b08b72efe36d3bddab48d92da_JaffaCakes118

Files

c19a5b4b08b72efe36d3bddab48d92da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ