c8d8a3c79b490388aba08390007130a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8d8a3c79b490388aba08390007130a6_JaffaCakes118
Size

9KB
MD5

c8d8a3c79b490388aba08390007130a6
SHA1

4222842e693e70ebc05069fa02b1bd2208cf6113
SHA256

efa409d65257551e7781b4a6a746d8c898a419404641b87bc79920dd542d1dc0
SHA512

8fa65346f224e293a683c844425497cf97ebe2b03d549c72a5822f135ef2b43e51ba72c59fb7a24ad074bc8574fb4590085c648ac505e7d060106c1f65977fa3
SSDEEP

192:5BksuvPY82gQv5F4ztWeMZZ3P93VnjdwCzI3bs9p:D82l4ztWeMxFnhwCcrs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8d8a3c79b490388aba08390007130a6_JaffaCakes118

Files

c8d8a3c79b490388aba08390007130a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ