d190e1512e6707065e5d70ef11b7b1b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d190e1512e6707065e5d70ef11b7b1b8_JaffaCakes118
Size

251KB
MD5

d190e1512e6707065e5d70ef11b7b1b8
SHA1

493f66c8d36c9fa622e8402e21ff346bb1c53448
SHA256

6a1e1819724c08143157c8b1143a6a163c70d6e7cc69e226c84c42a1a778895a
SHA512

12421372a883b0a01f5b90caa585aa62f1aa94f7ba617751818a9f327549fea8b4e880ea87de7333e2c4bfc564d85984a81f283991bb999b20981679d77a7693
SSDEEP

6144:kWIB0M47ORslI/wv4Mmt///8cr62B6wW4rDHFm:kBfs9vbKvQ54f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d190e1512e6707065e5d70ef11b7b1b8_JaffaCakes118

Files

d190e1512e6707065e5d70ef11b7b1b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ