d67d6569674b53933898e4731e16a3b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d67d6569674b53933898e4731e16a3b0_JaffaCakes118
Size

437KB
MD5

d67d6569674b53933898e4731e16a3b0
SHA1

346dfc395d387a018a85c4a34e1f7050c556a8db
SHA256

c1a75df24bcf9049388927103fd50995d894bae14223048f6ec59cf89e11afac
SHA512

f6c416b151135846797838ff19fd2adf45f4b2fab476bc596cfe03d4595f8a192a785c7426666f493f3508ac7d0b3ad28c307dff3db9212c13657dbd25dd7e53
SSDEEP

6144:lCeGSkDJm4kkZIWt/XaYAwO9PUFfzGN8gdYsTZNFZVmuJET:VGSk44kkaWtvdAwdz28c/VZVmuJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d67d6569674b53933898e4731e16a3b0_JaffaCakes118

Files

d67d6569674b53933898e4731e16a3b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

|J]"sRC
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ