570cf0c679107ce3e8782871597d6d85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

570cf0c679107ce3e8782871597d6d85_JaffaCakes118
Size

93KB
MD5

570cf0c679107ce3e8782871597d6d85
SHA1

8e932433fb53b0acfb81e82949eee118cbb5b7c0
SHA256

f48a9e047f724d1b336403b5afacc340313feff0002800f90b3ba2310b84af23
SHA512

29423a1af766393299674f9ecf27aaca4080b74bf5fcdce58d09c2902fae337735decb835a86d5bf5d3b74c6bb5fc2ce6595f5e7d233582bbb95952e54f87563
SSDEEP

1536:qt1gagL9lRqXl/tZPQDJ2CXYT/uNTHFMgmsJY8v5LrtTQYFIaun4z0uc:XMXlrQtBoT/usFMR8YaaA4z0uc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
570cf0c679107ce3e8782871597d6d85_JaffaCakes118

Files

570cf0c679107ce3e8782871597d6d85_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.amsha
Size: 512B - Virtual size: 381B

IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.osc
Size: 512B - Virtual size: 259B

IMAGE_SCN_MEM_READ