d609c36dc388f8caa73954d51c1950cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d609c36dc388f8caa73954d51c1950cc_JaffaCakes118
Size

151KB
MD5

d609c36dc388f8caa73954d51c1950cc
SHA1

6efab8bbf15ba0c0c29c909897b1145209bd0e13
SHA256

de4cfc23c044c237c3102dc172e93ea3a2a6d7b1f7871d2e33045ae30806011d
SHA512

bdeeb06b6d98f16085c8642888d87dadc61b8b180b82165b2ab89456768f6a8f325ba99898031cf81bd0332298447e004e637a90f65671029b399d741c311d78
SSDEEP

3072:PsVkrscEsyePaZjqkQu5goJmtxu+N08+7or79+yOdw7x5d9ch6lY5:DjEEPakju5gT2w08drB+BdwHLch62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d609c36dc388f8caa73954d51c1950cc_JaffaCakes118

Files

d609c36dc388f8caa73954d51c1950cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ