44d8831101bb9a7653017060519f20ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44d8831101bb9a7653017060519f20ea_JaffaCakes118
Size

1.0MB
MD5

44d8831101bb9a7653017060519f20ea
SHA1

f8a0974ee3d16f2684437566a4d0cc21c340bb8f
SHA256

aaf88b515761a8f70468dfec7f2f1141df0795bbc9ef61efc0850753ed32558e
SHA512

7b32c76cd32c4d2f8a5234e60f2b1d194151312678d22f941f355e605fc52fa925ab27a401c562a9ee03d7d11f2ee68a99f37559f315fd1ef25c80af1d95ec95
SSDEEP

6144:kfW0giDwsbhQ9qi9Cs4F7jpKrxDgSwP5k:0WViDDhiCsQ7FK9go

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44d8831101bb9a7653017060519f20ea_JaffaCakes118

Files

44d8831101bb9a7653017060519f20ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ