d00c590c51b3859e985169b0641bc906_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d00c590c51b3859e985169b0641bc906_JaffaCakes118
Size

2.3MB
MD5

d00c590c51b3859e985169b0641bc906
SHA1

83f2e63f9af69526efeddc3a3a7ce475ea61f5cc
SHA256

d0006c978fb78d2aca5d462f5cced36011656da2b0bb843540752222f935eb9e
SHA512

d00fb8b3da7ba30fbd798ef0707bb92ab452d5dd50c61539afd2ffc79af60915ff4a06814e27e1e3fe9cb6ffe393ef574f7d10e536447964520cf634121b1452
SSDEEP

24576:z88dn0iNpjewtrwlTyaLk5uzTZXMSv4KfqVx+eh0+wJOCq8IHlx5gtkFst9KCdV8:ZoWu1HW5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d00c590c51b3859e985169b0641bc906_JaffaCakes118

Files

d00c590c51b3859e985169b0641bc906_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ