1029694525a9086bd6cffb27a1b1fe3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1029694525a9086bd6cffb27a1b1fe3c_JaffaCakes118
Size

476KB
MD5

1029694525a9086bd6cffb27a1b1fe3c
SHA1

6c282db61484939bc3e702f32d670ac6665c8499
SHA256

a2bbb079df1556a0b5431c25b0ad5f77e524548694e4e6fb15cc136eadef9831
SHA512

249efa38f66b56aa8b545bd3448a2e9cec873e12a15cd9f8bd6e650820e802608c02a7226d819f5e7eaa4f63f384423fad234d0ea65c717c898e0e3922cca007
SSDEEP

12288:EmPKJBErrO6Crt/wivbBi46LTlWKBoP3wF:EmPMBEvODrSitpObo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1029694525a9086bd6cffb27a1b1fe3c_JaffaCakes118

Files

1029694525a9086bd6cffb27a1b1fe3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 464KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ