de06a0d03b6004c005700a833a0eb645_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de06a0d03b6004c005700a833a0eb645_JaffaCakes118
Size

15KB
MD5

de06a0d03b6004c005700a833a0eb645
SHA1

20754106943bee7041fe98d1afc5930dcdeb5771
SHA256

b7cc5d4750b0b3e45d0e9956f10894325f9f280dc8d3dcdc43ee3cff58b24a07
SHA512

bdfefb6d3e7897fd14f176490eaf5e7785223f02662051738b54516af2b503fd0a28a9c6c78587b374d3e08ad834486d68f146357c58a1c5d15f8ee608e39488
SSDEEP

384:pL5/K7Gk1Fj1HT/jE1KCwpTx+LTV324F9VsT3TlA:ZPk/9j/Din9aA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de06a0d03b6004c005700a833a0eb645_JaffaCakes118

Files

de06a0d03b6004c005700a833a0eb645_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ