c1fc7f099dee1b9ef4603e0d089591e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1fc7f099dee1b9ef4603e0d089591e2_JaffaCakes118
Size

2.4MB
MD5

c1fc7f099dee1b9ef4603e0d089591e2
SHA1

6b86473deed35cefe2c3a5779cae1b23e22e2451
SHA256

a7ee2c9ccce0612ca027c3bbfbb1e21d97628cbbedee2154445a6b3fb4d9382b
SHA512

3e65590f2a706be6552ed1fe35de9ca05cdd19b5ef8b21fe77d05f7c86d32b36556c411770d2f041279764fc7eb543642528998002a353bb81dddbd73d233822
SSDEEP

49152:QV7VJTiS2zOl4RUIzOpcTfkZuRcII4jn5a/CvPT/WnYK/Yp:W7nt2L0ODsMa4//s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1fc7f099dee1b9ef4603e0d089591e2_JaffaCakes118

Files

c1fc7f099dee1b9ef4603e0d089591e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ