d72de3f3a66261746a28c053e63ebc22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d72de3f3a66261746a28c053e63ebc22_JaffaCakes118
Size

280KB
MD5

d72de3f3a66261746a28c053e63ebc22
SHA1

cf78a8726a623e24a54afc5787a6d1abc6a4e709
SHA256

c85785191d1b671a5b7a79b77cf536c08dc9c2c885277ae3b5e68b7cfc1189e5
SHA512

48f05901b4e30d4514c1f12134f317a4bc9b235dd7497fe4fe0bb3161cde88e8f093ad3d0eeb135fc4c412a834aae26ac3ed94f1c730fac127918c4d236520b9
SSDEEP

6144:ankriPxEhr3tyDy5XwC9FrcRi1zGPYf6l:akrikbCypB99afPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d72de3f3a66261746a28c053e63ebc22_JaffaCakes118

Files

d72de3f3a66261746a28c053e63ebc22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ