d6724ad78786ce226dc985e15a7a6335_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6724ad78786ce226dc985e15a7a6335_JaffaCakes118
Size

93KB
MD5

d6724ad78786ce226dc985e15a7a6335
SHA1

63703e78247419d57075fbf4815faf572ba2e88b
SHA256

0c1b40bd2de89cf38c3df4faf967a1e3f5ec164dfa08c015cf295db93fe927b8
SHA512

c28eeb038e394e397079b68311a44ae0decdd3f65ef9be59547e627e30b5e5fd72a93187113baa22a36f62758095112060d8822bcfb47674c9cabd8c466e98e6
SSDEEP

1536:LxbiWTZ4tPoCnJ7AEKfr4kQNNlEPbe3sPCmEelBh7CG2TO3KB5KXpE0bxwmOg:LhiWqqCJ7Abr4kQNNmbSS1XBhFO5KXpT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6724ad78786ce226dc985e15a7a6335_JaffaCakes118

Files

d6724ad78786ce226dc985e15a7a6335_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5cd5ce0c7b0a7bee2ebcb5b52e5b6225

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE