1819521f272eb0b39e878a2d328fca5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1819521f272eb0b39e878a2d328fca5e_JaffaCakes118
Size

987KB
MD5

1819521f272eb0b39e878a2d328fca5e
SHA1

1e64ef9cee890e21c638a91d50959b63a4d40bc5
SHA256

02bd11717a4715bab96eff767defb09196a8588470b144c591647c0d77d7185c
SHA512

a588e941c8f3785eeeff438027ea83c0519a60ab87e09d893efb4176b470e72bd0dc7a3c8fa75b7800aa63e4b564fc14e96f075a45515eb269a4274b937b7fc2
SSDEEP

24576:FmddvmJ6J8rGWKlYwgOSqpxsR4C0bRtNnfI64y1:g+q8ol5gOSqTsR4CEvNfI64W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1819521f272eb0b39e878a2d328fca5e_JaffaCakes118

Files

1819521f272eb0b39e878a2d328fca5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ