d4b8c4a4d02056ae543cbe0a17e38d02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4b8c4a4d02056ae543cbe0a17e38d02_JaffaCakes118
Size

41KB
MD5

d4b8c4a4d02056ae543cbe0a17e38d02
SHA1

3a7264eaa1fcb8b6e592897855a50cf3cea57a2a
SHA256

a5ee1dfa5b7746668bb71a4e5c9136e7668395a4c3ddf037127a5d5085ec2bd2
SHA512

99dc4587f59772d70738838a19a1a5fef3863a08e89595e9df5c9e25ed2add8258c9917940870b7672502284404b96038529721b56b136908acd6a150fdfa38e
SSDEEP

768:mffeTIahG2oq667ROhGRj2hNoY9G77zWp:GeTIrR6YhGRKIWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4b8c4a4d02056ae543cbe0a17e38d02_JaffaCakes118

Files

d4b8c4a4d02056ae543cbe0a17e38d02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ