f681634af44d6cfc5acdd6129c245039_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f681634af44d6cfc5acdd6129c245039_JaffaCakes118
Size

514KB
MD5

f681634af44d6cfc5acdd6129c245039
SHA1

24225d0ea7e5f3f8bfd7d1c82218b8214fc781fe
SHA256

08413f9ccf6acbd48c4bd40c01dad0376efcd77ec20d919ba5a334341fc85bb9
SHA512

ea41c014b2655d710f98ae0140b065cbf4da4006d227ee9b981bddfc63a826fd19e63821864d41e856053eac89fe931cc70b6fb97725572dae302d0970055d42
SSDEEP

12288:FaCdQYzDBNU2QFHMmBQcd9YPghrFfnOEW:LJNUtqPghrxnTW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f681634af44d6cfc5acdd6129c245039_JaffaCakes118

Files

f681634af44d6cfc5acdd6129c245039_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 352KB - Virtual size: 351KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ