d47fd02afb94b6511298fd0cafb5d883_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d47fd02afb94b6511298fd0cafb5d883_JaffaCakes118
Size

253KB
MD5

d47fd02afb94b6511298fd0cafb5d883
SHA1

55cab72b98a7c1bef050e5a59b0086dfcb7dbc44
SHA256

49d785a758ed052a86201e4a7a96cdb617b76f05968d5c177c1e8dedcb90d426
SHA512

4033b8475839aad7888c7bcb01b9619abd1e765b93e2c080df29f58d13d0121cebac28070e5aa9fc8cf453b1c11abb7710448febe315f146331ddb0e3f94a26f
SSDEEP

6144:IsoOO2pp7xBcCmXG+rAWPEYuTLqmNJRPsP3QLm:7oa7xBcCE4LvNJZqQLm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d47fd02afb94b6511298fd0cafb5d883_JaffaCakes118

Files

d47fd02afb94b6511298fd0cafb5d883_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ