165f59cff1b7706744977f7d7a622e27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

165f59cff1b7706744977f7d7a622e27_JaffaCakes118
Size

138KB
MD5

165f59cff1b7706744977f7d7a622e27
SHA1

5ba28473d9a2d90d1fc6f6a946a23e2dbd32b721
SHA256

f8cb74e0afa7b25b495e3cdca2a32d3e8a15e71ac639f2f18dd98e7fdb76a951
SHA512

8affa1f216b5ddce10ec63345859a01016cee49bab4bfa8b113ea825d5e7738371f0b35b2ab69b92329e7a9a35fdd55210fa09d1dfc04d42176c13a79425d3fc
SSDEEP

3072:CBnx9xw3vikgkhhrLs4BqKnHzjbh8TtxWXJ/IF8wX2EOms:27w3agDnHzjbGT7WXhe8c2Eu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165f59cff1b7706744977f7d7a622e27_JaffaCakes118

Files

165f59cff1b7706744977f7d7a622e27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ