108ed611cd06dd6d844a7b1f9822a620_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

108ed611cd06dd6d844a7b1f9822a620_JaffaCakes118
Size

16KB
MD5

108ed611cd06dd6d844a7b1f9822a620
SHA1

5666b9cd66353f6c65dd2a2b87984062305dbd8f
SHA256

686a8fbaacc3283080143c63efdf2d47b5b4551bccd7edb99245e3dfa4b565d2
SHA512

0bb99321e4d6d9be2097061d717a7f2be07fdf1fa1c67fa1744896877b43cc57574d0abf327099459755e725aa9a450d668085f9dc6cc667306b1d9b96a23056
SSDEEP

384:08SiTskqAvfUw2NnYGyRhakAaHRkgl96REJ:08SijqAvsxNx2hk6RNr6REJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
108ed611cd06dd6d844a7b1f9822a620_JaffaCakes118

Files

108ed611cd06dd6d844a7b1f9822a620_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ