1781c96ee9e763815463aae6927a0344_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1781c96ee9e763815463aae6927a0344_JaffaCakes118
Size

1.1MB
MD5

1781c96ee9e763815463aae6927a0344
SHA1

80123536ed6eb851da787ba09352e3d7c1d165db
SHA256

6e3edb336b70b0351124e6ea2129ab4d09ef61a20e80b81cdccfdad60ec02356
SHA512

09ec816e04d595e7a19a0c05318dfbcc397032dd9e774cfeeb459166f1160b13cf6eec2ec1420160092cda8e0c27851c4e2890333c3323ead964bbb103c84e8f
SSDEEP

24576:XslvRH5dfvFfdXqcOnre1cCILumZnsYwsEaT1nQ6O:cD5dqciL7umCRay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1781c96ee9e763815463aae6927a0344_JaffaCakes118

Files

1781c96ee9e763815463aae6927a0344_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ