da0e98e9a402760d3998547894a002e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da0e98e9a402760d3998547894a002e5_JaffaCakes118
Size

92KB
MD5

da0e98e9a402760d3998547894a002e5
SHA1

167d0d7c229bfa4e0f9075c1dd6d000b9627af93
SHA256

7e93970079d1b7469c5bb7bf0b65664b35f5597a748153f1024dd7965de1a10b
SHA512

a23b12853332a45f7d31325e734e299397d0eb7790881228e97c5c675212b3752a3b894a5dda19a9364aa0e49d96c14fae1a8fa9566bc24d0fd6b74e4227c3c5
SSDEEP

1536:Hi9wM5hO2xnuUaZgJGwty1Dfy0wslW4zLPIKqQ0WVNMVJ:H34Uw8Dfy0wX4zLQjWVSV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da0e98e9a402760d3998547894a002e5_JaffaCakes118

Files

da0e98e9a402760d3998547894a002e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ