c944d2f162b8c6cc9d2b13c25e01a308_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c944d2f162b8c6cc9d2b13c25e01a308_JaffaCakes118
Size

812KB
MD5

c944d2f162b8c6cc9d2b13c25e01a308
SHA1

cbadeca018bd12b9bb046d60a3808055c47e5bda
SHA256

c9ee77685d311ff527fb4eea9956567f03108da45b39345cd51a06335f464d0d
SHA512

ebc84dde0475bbe0f74cbe3a0c8097156b79d7617e9180539302c9435719bcb3162efab2d070d010bd4351d4ad4ae6961d512d9fd36b0402dc64a662e08d8e04
SSDEEP

24576:we9WMD2DMuZjEGaL2dZs1SPn9VKqAltbF4Gv2/pgfLG:PkxZj3611yVFArbFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c944d2f162b8c6cc9d2b13c25e01a308_JaffaCakes118

Files

c944d2f162b8c6cc9d2b13c25e01a308_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 808KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ