d000baba81500a3d678f293bef23c07d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d000baba81500a3d678f293bef23c07d_JaffaCakes118
Size

448KB
MD5

d000baba81500a3d678f293bef23c07d
SHA1

2446b160768db6f6a51e7a06dd10f2b7c1ce9730
SHA256

5a01755bd5d012825c5162e6ec833f6ade76717d9ccfcec8a0a4da52f3b93e1b
SHA512

a7f441864be8a541218d84e6724c93ffe4ef430ee26ed0f098c4d9a4e245270fd2d6c51189d610df214a1a9e8dccaabc7ee89ce5ff4ce53fee6588a7c238304f
SSDEEP

12288:f9W5/gKlG+5qE9jATkTM0Lei1L1ZaShYufxac9g1Wi5tWjby:f8Lf5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d000baba81500a3d678f293bef23c07d_JaffaCakes118

Files

d000baba81500a3d678f293bef23c07d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 436KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ