d38e16d0049edbfc55528a381bbaf825_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d38e16d0049edbfc55528a381bbaf825_JaffaCakes118
Size

272KB
MD5

d38e16d0049edbfc55528a381bbaf825
SHA1

1b9080d8e3e6eabbfc1cbeae7a53d59b24185707
SHA256

61b9f2807e1dc72382613c1944cf9a5219d3afc011997200b611f55385dda989
SHA512

a38b3cb4a6249209b83687cd1c31f8c223075ad2f79b39b54338a66822732ce8edd3974ca7b95c1ab67cfbcc4aa55a88a2b145e1159201e9dd86dbc31b8973f0
SSDEEP

6144:rkWM8ozyeff4l41UbAucI11e/qCNW0EoD1A/hF:rkWWAe1UbnzeyCEWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d38e16d0049edbfc55528a381bbaf825_JaffaCakes118

Files

d38e16d0049edbfc55528a381bbaf825_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ