c01455f045fa249acdce26fe6ed630ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c01455f045fa249acdce26fe6ed630ef_JaffaCakes118
Size

66KB
MD5

c01455f045fa249acdce26fe6ed630ef
SHA1

ff8cb5803b53e0b6e41a33a62b69bbdf2d525f7d
SHA256

3e66be1ab42337c8396e71b2068484c3cf786bfefccc3c50114330ff5c080f23
SHA512

64c589836f8fa27c57b2fddd2541a056e3fac9cc87fbfc246fdb8567b3b6a09da97ec09584b7e448282eaf6e709cd45ba84627d9abe788923267cbb10fdf0b32
SSDEEP

768:kZ9Tg6Gv7TNqYxJgLYzixVKsZh6+iivcYrgbZSmAA1VnPDO6aVVOGo:aTgPV1xJgLaqVTBMIU7OJV8G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c01455f045fa249acdce26fe6ed630ef_JaffaCakes118

Files

c01455f045fa249acdce26fe6ed630ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

7'bv]Z
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ