0a9ebf12a0e8415a5a83c8a85970db79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a9ebf12a0e8415a5a83c8a85970db79_JaffaCakes118
Size

64KB
MD5

0a9ebf12a0e8415a5a83c8a85970db79
SHA1

ae6e2b3456905994b3c9f04abfa78319dbb15541
SHA256

798e2623375277cd43fb2a367e0f2e650ebeebe2aecc0029a9d3d0215cec7281
SHA512

1270ed0bc00fc4908522bc2bcfe42e28550691c9502560db96c69f6c6aed7fa07585a8bc61bc583b1a335e60758a7dfedfcb679df282dcb64ef7417b2bbae844
SSDEEP

768:T9FWQuA1fvhDLWeWuuv77fIcB6Q9Ypw1rYUp8qoCxb:Takvzxuv4cB6QOwNYZCxb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a9ebf12a0e8415a5a83c8a85970db79_JaffaCakes118

Files

0a9ebf12a0e8415a5a83c8a85970db79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ