d985ba05b0326d1578a6a9c240629da4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d985ba05b0326d1578a6a9c240629da4_JaffaCakes118
Size

239KB
MD5

d985ba05b0326d1578a6a9c240629da4
SHA1

e390fb0840a9b39b4d767a9e8aec36623fa90359
SHA256

5015198b157aa64c94218121f72d93e99feb7fdb4b91986844aa7709c8d5518f
SHA512

1465e67f78a335c951c58d5f919e97d88fc1e91766dc5b5932a8f789e9c54d42bf60689a28e47606f54b3d63f38d7a660dd730c47e03b424323a1a05557a63e1
SSDEEP

6144:Pp1PDeaID04oWhQc6wz6jAYA7BBBtt3DhH97L0Uq:h1PMD0FptxhAFjttTJ97c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d985ba05b0326d1578a6a9c240629da4_JaffaCakes118

Files

d985ba05b0326d1578a6a9c240629da4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ