f7eb3dac5c5fe26865ed2b8724d71227_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7eb3dac5c5fe26865ed2b8724d71227_JaffaCakes118
Size

723KB
MD5

f7eb3dac5c5fe26865ed2b8724d71227
SHA1

1f2a69cbbcd9a761184bf06ae80afa0aed7dc4ad
SHA256

30673ca4675d75d6597d5a1bc76ada58e20603961532bd0dcd429fe7879a73f0
SHA512

926d5da446882d1fe28b47041e3e12a84bdb338e08bfaba48dd87262cd4caf563b446b35eb18639537a9f40c7f0680135a3cb003ba10948e69f3174ecb9b5d24
SSDEEP

12288:pBLZi970Oz6hGy01Oc0D8E40XpXyxnY2b0d3qpLvEQm103pJ5:DLZ7AOHoWXpUY534qmpJ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7eb3dac5c5fe26865ed2b8724d71227_JaffaCakes118

Files

f7eb3dac5c5fe26865ed2b8724d71227_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 718KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ