4553238571725166b9e506bb3486e23d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4553238571725166b9e506bb3486e23d_JaffaCakes118
Size

360KB
MD5

4553238571725166b9e506bb3486e23d
SHA1

400ebec8ee29cc80288a745ba3a0d4a531cd6daa
SHA256

7671ca41dcb653a282ccdf1cb6d5472aa02edfeec9260c352e93865fc91f33f1
SHA512

a9499d2e9e3710161725f4c9ff7a127d8e6ca6ac792ca6bf2315b4d722f1a4915e26b8fe8143d03a1cef747afa1af4e0cfdac3118c65fb71b06698afbf728258
SSDEEP

6144:7NS6/OLsvk60GOSTTMx6nqy3d9CaQ4ppFMgJNDreoIJap2i:7M62LsvH91cNaQ4pptJN9IJap2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4553238571725166b9e506bb3486e23d_JaffaCakes118

Files

4553238571725166b9e506bb3486e23d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ