11f08097d07d580d18c6d491eb70630a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f08097d07d580d18c6d491eb70630a_JaffaCakes118
Size

1.0MB
MD5

11f08097d07d580d18c6d491eb70630a
SHA1

3bcf9cfb010da4fefe75795112dedae8238aa08f
SHA256

b172bac57ff14a4d8b94f3a39e1fce65b00df43418935b905f02120ba00ddbfa
SHA512

c05f1e77ef6fadf7dd327fa679044a0729832eec6bc87f52f44b3c014ccc7b2df197e17af6a36dbabb36249c6cb072cf3107973dd0a117cd968e29424e5049bf
SSDEEP

12288:w8LxyZrvCPS9EGUyScgxVP/vkbfGGJckyQ2QKxpIRYfMjY:wzRvCPIUyTqZXkbNJ5T2QYpw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f08097d07d580d18c6d491eb70630a_JaffaCakes118

Files

11f08097d07d580d18c6d491eb70630a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ