df011d42f7b641fbc1ed92319104b4fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df011d42f7b641fbc1ed92319104b4fe_JaffaCakes118
Size

579KB
MD5

df011d42f7b641fbc1ed92319104b4fe
SHA1

d0c29d6d626b4ebb8d4057f6eb94acca7995108f
SHA256

d194d190357a5a0382faeec75b6a47a75a1f85b35849e1f8d86fd19ea00ba4fa
SHA512

d01e248d8e4f3e013a7fe0e6c6ab2de7da5f84a1f5c90851e7900f8eab6924b7809f8fe4c0299119702efa81b01f9a9565c3d75d7172c7239a8a07b41ce477a5
SSDEEP

12288:a5wBfxmACQAoC6ID/OKb7edXAYeN8L/LuRIJO1yV:a568j+IPXedQYeNa/LRb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df011d42f7b641fbc1ed92319104b4fe_JaffaCakes118

Files

df011d42f7b641fbc1ed92319104b4fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ