c9836d48cdb69ac5da075c6839b4418d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9836d48cdb69ac5da075c6839b4418d_JaffaCakes118
Size

416KB
MD5

c9836d48cdb69ac5da075c6839b4418d
SHA1

05970b2f56e2f63d76540d17cdec91606eb57714
SHA256

5f4084b9a090c53f5a55baf1ebff02bcbc5abc89b2272d8b2186e8895e78bcd5
SHA512

4f57a4138cab905687bf8ba7cdc4ac2205f724299ebc13c5ee78b0279ee5b904d386a6cb2e6d57958bdb2ac2b2c4be0c1f64c6999c214c0a76179eccedc790e3
SSDEEP

12288:MZOQNiAFqr/5bemU63YcObdoj9wrTQqSJbPTw:1riQUD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9836d48cdb69ac5da075c6839b4418d_JaffaCakes118

Files

c9836d48cdb69ac5da075c6839b4418d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ