c4212a7e56071c4695c13fc5cb28ca52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4212a7e56071c4695c13fc5cb28ca52_JaffaCakes118
Size

7KB
MD5

c4212a7e56071c4695c13fc5cb28ca52
SHA1

b81c08e13a6c094594a7e0d313e458247308d6c5
SHA256

838c5a2e68f346645028a027b5212480e39e4be8136d2fd93733ead4d966a7b4
SHA512

7567e229d09503613b8ec6118bcb07ffe090422cd491a541022e3b7e9dd56bb0afa06ec3ff8621f999fc5b22c01b13e03c8f1c031f51de375ae1695890a9db46
SSDEEP

192:31k3mrRZSWSPRVunlYJLLLTT4nPus+uD:31kWrDSPRdPLT1s+y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4212a7e56071c4695c13fc5cb28ca52_JaffaCakes118

Files

c4212a7e56071c4695c13fc5cb28ca52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ