dfbeb24733a710f91a07396c668b2c42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfbeb24733a710f91a07396c668b2c42_JaffaCakes118
Size

13KB
MD5

dfbeb24733a710f91a07396c668b2c42
SHA1

f03e23743225a7268b2af253b1c4ce1fa2ee4e30
SHA256

1765c7eb9a53df2827a52199d278f59091f1ad9148ce677df8b9e2de96bbb392
SHA512

324ae0dab41d07d147195786a1fb04a4dd576cef31a1bcd30d01896fa8c90b8aae682ed598fccac961f23d97f6f06fba96e86b762b185eb6bee34960283ed85b
SSDEEP

384:PXKkjlMXYrDFcR5lLo6QFaUM5rDax1zebOi:PX5GS8TUZ1WD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfbeb24733a710f91a07396c668b2c42_JaffaCakes118

Files

dfbeb24733a710f91a07396c668b2c42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ