f057927392d7c46e7a434c02be801976_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f057927392d7c46e7a434c02be801976_JaffaCakes118
Size

309KB
MD5

f057927392d7c46e7a434c02be801976
SHA1

bbc8e76657935178d9d3a7a64268d1878a7e9e6e
SHA256

3e2860bcf82a7bc65c135f31802721a5508de3656f2e8d5f6240748788883f30
SHA512

24f0962c0777b0aa4bd3b7f35a66e3756cf267bcd9e549df6e5f8dc9a0c40ee8d2d09747c69d1642a207fe29c18456eb168073bb5beed29626ee5512ba992055
SSDEEP

6144:Cr7W87TJ4+cHcKnTTa5vbAnWcbxljDr6Ar3bvFvVcd959avE:U7Vm+cHcKnTTcCWclFrrdvVcdEvE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f057927392d7c46e7a434c02be801976_JaffaCakes118

Files

f057927392d7c46e7a434c02be801976_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

\DI|d(Q
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ