29bf55d47181fdc3bf0a85aa9e57d9fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29bf55d47181fdc3bf0a85aa9e57d9fc_JaffaCakes118
Size

798KB
MD5

29bf55d47181fdc3bf0a85aa9e57d9fc
SHA1

836d2d81c3d5796190bab9d6d86ec7c56d039ae0
SHA256

f32133ec278e2824d5eef01d0f746bc773187b39b2262b8661339d62be9f9782
SHA512

6d71b2ef542167ca027793918acd72aa24a016724411b363e2a74106eab4317c2e75017e1f40619db1cabcb0746325d883160b973872258bd57a3953cd426747
SSDEEP

24576:oXSN9c02g2X09czDl32KF8nLpqXWUWyU8lT88t:1NTaUWDx1FCqZWJ85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29bf55d47181fdc3bf0a85aa9e57d9fc_JaffaCakes118

Files

29bf55d47181fdc3bf0a85aa9e57d9fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.sdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textxc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ