066e87bd3707464d9d250b0782a2e27b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

066e87bd3707464d9d250b0782a2e27b_JaffaCakes118
Size

852KB
MD5

066e87bd3707464d9d250b0782a2e27b
SHA1

3951309c9609f4b7d1227a828679d2dfce7f96f7
SHA256

f72ad10b91b51f8ffb7650b24448efc534cb0822d870606036d2173ca92f358a
SHA512

8ecd97e8d1decb92a2b7221392e8c93bace12f2c79935763cf6927c3c9604ae360eb56121be3fdefd40fc4e0feac341704f15a4cccb0137178b6f87b169d9405
SSDEEP

12288:0EQwL8fvaevAXYm+pwU48DTtNjaWzob5sArGkDA:01HaevAj+pPRDTtNjarAk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066e87bd3707464d9d250b0782a2e27b_JaffaCakes118

Files

066e87bd3707464d9d250b0782a2e27b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 480KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 364KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ