dfbeb78be5982837aa158e41b0205660_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfbeb78be5982837aa158e41b0205660_JaffaCakes118
Size

427KB
MD5

dfbeb78be5982837aa158e41b0205660
SHA1

073f2e5fde7fcf29a18b9d1d23d168afce2e967b
SHA256

7b404f736a46e3b4ee331557f1029aa678dd3a223ec30cc6c41847e83bb8a719
SHA512

cc6840642eff4ac422d6b601b7580e786acc2c03885f7f0dff6fb4a62f2995bb14f9e311b05d0e884a9ee54581ffbad2138cde3ed89e19598c0ff5f6f2454ad6
SSDEEP

12288:hToeiBlksKkQxSVwHnjTDBzgu4SVtWUkcLJggd:hTXaKjS0n9zg8tWUkUBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfbeb78be5982837aa158e41b0205660_JaffaCakes118

Files

dfbeb78be5982837aa158e41b0205660_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ