d0eba286d3f34ea747abdb5ee10869a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0eba286d3f34ea747abdb5ee10869a3_JaffaCakes118
Size

324KB
MD5

d0eba286d3f34ea747abdb5ee10869a3
SHA1

2e982a584066cafa2d0fb63c335c437176db7147
SHA256

4d39cc1c685722545a2e9030e626131a6ea89a38fae52d94560af21f01641901
SHA512

39c11a25005ae8d123f00e6e0ddba3acad9461b67a2556e84e901a75da0a1dfc4669d36371bc6f2dd3dbcab0ec0017dd533be83c19aef91a55080157834df464
SSDEEP

6144:WsyOeJvlAOLJn0I4Cbu69PZay9ho1/AssBVyyecV:W9BJtAOLJn0IBRkOy14bB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0eba286d3f34ea747abdb5ee10869a3_JaffaCakes118

Files

d0eba286d3f34ea747abdb5ee10869a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ