e9d9c8c3fbfe63ba44e09ae756ad3401_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9d9c8c3fbfe63ba44e09ae756ad3401_JaffaCakes118
Size

120KB
MD5

e9d9c8c3fbfe63ba44e09ae756ad3401
SHA1

52af6023a8d7cdab5fa144b30756208c9f027b32
SHA256

0f7bf90bfc8f1f56e1ba7009c287e49489192b01fa8ecdf32e9ac968e4f10cf2
SHA512

247d19b83b715ae0d097d99ecd3db0cc2d3ee2f212095d8c481c24b8d2a24e72098d0a20c2a7bab4e1e2aeb9eee0d63b8baf46cd23ecc83b384afcbfb55aa2c6
SSDEEP

3072:1Tu5K1dUt27faXJbjrz7DLEODNfL2BCy/kX:1GKHUt27faXJbjrz7DLZNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9d9c8c3fbfe63ba44e09ae756ad3401_JaffaCakes118

Files

e9d9c8c3fbfe63ba44e09ae756ad3401_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

CNET.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ