291e3cc7029cf7633ca6c5101a670b4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

291e3cc7029cf7633ca6c5101a670b4a_JaffaCakes118
Size

420KB
MD5

291e3cc7029cf7633ca6c5101a670b4a
SHA1

63efe9ac1e73b5b5e116bc2fbe114fd5dd2e9782
SHA256

ab3acd52eeaf50e08f785be630bdea6a7f5cab5525090484b910d65e69a49af4
SHA512

5b68fab4a62f27e7bf0df6b3951252d18f8310d7925dc2ed66d9706f8ddbda7067928c4f829ca0424e682bd81cd34df87077114f5ccfa3c2e0ea4a545122c216
SSDEEP

12288:nKfSIoRfn5P3YCQzp7iJTPpQU06X+Aq7A:nKqvfZop7iJ7pQU06X+AqE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291e3cc7029cf7633ca6c5101a670b4a_JaffaCakes118

Files

291e3cc7029cf7633ca6c5101a670b4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 408KB - Virtual size: 405KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ