d25cd4fceea99a3b2c36db43b334d6a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d25cd4fceea99a3b2c36db43b334d6a7_JaffaCakes118
Size

406KB
MD5

d25cd4fceea99a3b2c36db43b334d6a7
SHA1

26454b0722ca8db1f2f3646e76db29029036db7d
SHA256

ada887c67e0bdd7b1f7e06b26845f76a78052758501447fe6beaa6e8b40ae0e2
SHA512

c7b411089d39bdf2764884e582b2c9813f9774b9b44f83b2c39d76ce2597d9e6d14dd969a688eed1c65739bd255336df323baaec5cf2dbfb22874368b1114d18
SSDEEP

12288:XciPZpOH0I88Ov+LSKq0KIYNdPUWK4Soed6:sMpYdq0KIYNdcK3a6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d25cd4fceea99a3b2c36db43b334d6a7_JaffaCakes118

Files

d25cd4fceea99a3b2c36db43b334d6a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ