dc0b077ee488601846d99ad1f647bd58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc0b077ee488601846d99ad1f647bd58_JaffaCakes118
Size

18KB
MD5

dc0b077ee488601846d99ad1f647bd58
SHA1

246546bfd0dfa1c896e270258efe60f47af716ef
SHA256

d2b1bf55b02b99797e204a6b853563fb4f230d8be4a66e7feabec7e1469f0e1f
SHA512

b30d721a2f935bb9c6b3a424589bef3f70334208d6e167824b30de8a1ed7fb2f3e835599b16a01018a0bd80047472ad7fba18a4f2eeb79c7ca6fce4b364cd61a
SSDEEP

384:KmlDGd0/cSD3ue0lsNu2asOWJ3tBEjyFaAAhCrDbCVPIVenIUi:dlSVlqu2p9IJQVenIV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc0b077ee488601846d99ad1f647bd58_JaffaCakes118

Files

dc0b077ee488601846d99ad1f647bd58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ