d9fc12c6924f89a99e18b7814906f722_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9fc12c6924f89a99e18b7814906f722_JaffaCakes118
Size

1.1MB
MD5

d9fc12c6924f89a99e18b7814906f722
SHA1

d745bb793ccab3e4b6377883537611d6c8f4051b
SHA256

8e6580a9414d2f2fbfa71b6fa4595afa25500663f9cad8a3f123491197fb23c5
SHA512

176eff193d8eae66e9eca851f4821fcc0ffd88ce790a1a2af4b5d97d30692a0c19e110cf15ac49a71f989f5590866976e6f5703d84f8d5f7dd7521ed409da485
SSDEEP

24576:zFVnML83Gf32aGyy9QDQr5hfaDbhQuzoHMr43GUmJ1U:z7N3GfG9R5hfaDbhrs3tm7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9fc12c6924f89a99e18b7814906f722_JaffaCakes118

Files

d9fc12c6924f89a99e18b7814906f722_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ