d13b6b82048a6b715c1f307847ff84b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d13b6b82048a6b715c1f307847ff84b1_JaffaCakes118
Size

72KB
MD5

d13b6b82048a6b715c1f307847ff84b1
SHA1

6a52bb74aeaa8f948eecdef425da9430809144d3
SHA256

3021296312f572e4c56bfd1b6cf9ca70765c4143d5dfdae5f52071e3e964c9b8
SHA512

9b699b8760c76b00b6603f075d8415a8a6018f5a8f9f6523d73bac1c4a4c891a489a0176d338723ac38857f8783df04f83b409432c7246b9ab6e0586dde2e9c4
SSDEEP

1536:WrKpl7BqKx5ZkLl3KUj+Ud1+FbxSb40D:QKpl9Jx5Y3KUeFbcvD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d13b6b82048a6b715c1f307847ff84b1_JaffaCakes118

Files

d13b6b82048a6b715c1f307847ff84b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ