cfe12e2ba77c021a2302e91b1005a6d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfe12e2ba77c021a2302e91b1005a6d4_JaffaCakes118
Size

184KB
MD5

cfe12e2ba77c021a2302e91b1005a6d4
SHA1

e67957c64d11a4b6a6a814c5af109dd01c453296
SHA256

edce6b3fc8e5f7b0e12f51ebbe6e9ae35b65cc34e62414d5e7037f610d0024c1
SHA512

e264a3a891edacee01904136d5666b411ec0e3b8b0cf8d8afc5831eca4aaef2bbaa64ba635693d1e787e1d2ffc44890b0d7f573bbe6b64ec5255804e4d3d925d
SSDEEP

3072:qNxrIYNNWqQ1CWwOvglPEw2YU8PaeFDfehKTJKEa:MAglPgYU87KKTJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfe12e2ba77c021a2302e91b1005a6d4_JaffaCakes118

Files

cfe12e2ba77c021a2302e91b1005a6d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ