df70bc883b951e99ba208ccc69410e45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df70bc883b951e99ba208ccc69410e45_JaffaCakes118
Size

32KB
MD5

df70bc883b951e99ba208ccc69410e45
SHA1

017374b9116b8e0fac179727b8a914748ff1c9d9
SHA256

fdf955f3e15ba53b0f1fec00e5d8163838be4b316855dfb1c0ba518f7b48a9ac
SHA512

9bb14ea090a46b68c9270b292c6df3eeba2a6144ca135a68fb09ac4b8cdad8dbda740fd5ca0671476ac768f75689e8812d2e0d9e80edeb55bba057a51dbff9f2
SSDEEP

384:7xDVNeH9XMQL/0ZYILMHQn91o4wr4fuAPDSXt+waV+z902k:3NeH9xqHMI91DwrhAbKc2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df70bc883b951e99ba208ccc69410e45_JaffaCakes118

Files

df70bc883b951e99ba208ccc69410e45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ