df45ece9870e5dd9cebfaee8fb53f98d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df45ece9870e5dd9cebfaee8fb53f98d_JaffaCakes118
Size

868KB
MD5

df45ece9870e5dd9cebfaee8fb53f98d
SHA1

9b7d496c25ba055aa8484b33aa878c8d5c6f7c94
SHA256

3602a3cbe596a47270eed94dd17ee138f4ed7cfa770a7a932f6ec600b3c93acd
SHA512

b12c7c6759e020be9ae5189290391068a9c4edd33bed9531c2813c413d6a64a4f238d88b673fb3c6a7e78270221be6d7457eadc3b5dff4de3905bf1852993319
SSDEEP

24576:P+i4h1VB2t25Qc8aPgKiRhABRuEkVF8bxxx+JCxe:Iw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df45ece9870e5dd9cebfaee8fb53f98d_JaffaCakes118

Files

df45ece9870e5dd9cebfaee8fb53f98d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 856KB - Virtual size: 854KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ