c8ab3d1d780f7d0f1e03a0bde465ebab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8ab3d1d780f7d0f1e03a0bde465ebab_JaffaCakes118
Size

613KB
MD5

c8ab3d1d780f7d0f1e03a0bde465ebab
SHA1

428307464158a3cf68ccb9c7642d5b0442022ff0
SHA256

73abb747429bc6fc4c1d6b0b2643eb7fcd1cc59c2c26cddfccab086daaa3735f
SHA512

f1681f7a9ad6fa94f55fd8ba93423ee150ef2061d5f71f2949ca9390f3d54053ade00c2aaca6b64a202a586890f88f1b0264635fd99ac36c00019c6aedcc434b
SSDEEP

12288:IlCVv8ydR/w9MzYiQQwn939R8e1aJahhnV+kS:eC/JrQZl9R8XahhU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8ab3d1d780f7d0f1e03a0bde465ebab_JaffaCakes118

Files

c8ab3d1d780f7d0f1e03a0bde465ebab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ