520cd61b8cbb98f6a9fc3e68b5d0dbd1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

520cd61b8cbb98f6a9fc3e68b5d0dbd1_JaffaCakes118
Size

44KB
MD5

520cd61b8cbb98f6a9fc3e68b5d0dbd1
SHA1

3a0b542c0174174b8f65707a8c630264077eb973
SHA256

9de62679e68528aa35839b2b4bf6eac094f4ca46feaf2d434db9c8381d8abb02
SHA512

1d70f26cdd2ac4992e0f55d0c4174a0098d5c50f37d91462d32ae4d8896d9936d0b8feb28b0bb75e995d879af6b52a968c24cb3051701a418ed6af338344a126
SSDEEP

768:we5GC7+Lnl/y0loAf5a4XqNaXwAkVoa+LMZ9sp:ZYCCTNJcTNnAk+529o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
520cd61b8cbb98f6a9fc3e68b5d0dbd1_JaffaCakes118

Files

520cd61b8cbb98f6a9fc3e68b5d0dbd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ