db72aa3808688f641d9a5b5fb623e9a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db72aa3808688f641d9a5b5fb623e9a4_JaffaCakes118
Size

9KB
MD5

db72aa3808688f641d9a5b5fb623e9a4
SHA1

166e65649db822eff044824748744864a9c8f4a2
SHA256

5a6d962b11e721b1dba1ac0effed8dec51c445c6dd18b5df00a18078820e952d
SHA512

33bd3dfc9415d0938fe8d85d093d66c99c99a8ce04dc2b56a148c5659485175a84f5a81d23074275697a5ca9525937ff6812db10eb489b50339c6792c3293163
SSDEEP

192:4BksuTzHNQmCeMZZ3u93Vnjdwqz83pU4tb:DHdCeMyFnhwqY5ht

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db72aa3808688f641d9a5b5fb623e9a4_JaffaCakes118

Files

db72aa3808688f641d9a5b5fb623e9a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ