db4f7e8f5d50805427b07d6613eeec9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db4f7e8f5d50805427b07d6613eeec9a_JaffaCakes118
Size

645KB
MD5

db4f7e8f5d50805427b07d6613eeec9a
SHA1

4ecc32e3cb94b09d2fb331311651008e7c1d60a4
SHA256

3048083951964a9039454054c3f60d461f5e83f91a28fc8b25a7d633a3528845
SHA512

c6c0be7ffc3c3515a846ec683448276f7e0a22bace7d4a95fc78cd11ef0cb0d89dc9f7b9f85842eea4801c0ca784a3c9ab88887443c2a60b8109b548ff50306d
SSDEEP

12288:FwRN84QBOngWS92hj53jxjat/unK8MNecQLKKMpB8a:WRyjOuaJot/3ecQ+BBP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db4f7e8f5d50805427b07d6613eeec9a_JaffaCakes118

Files

db4f7e8f5d50805427b07d6613eeec9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ