dadfb843f67fb91c7c5a1ff269a937a7_JaffaCakes118 | Triage

Sharing

General

Target

dadfb843f67fb91c7c5a1ff269a937a7_JaffaCakes118
Size

417KB
MD5

dadfb843f67fb91c7c5a1ff269a937a7
SHA1

e7fc816570212c2e22053d6525a1962b3f0b8bb6
SHA256

bcfbfc42a78e7d28bf25e0b6d0a9bf305488d58f8eb07579c4948f2438171446
SHA512

cb85fff98e9fb09a70de832853b068e252520fe35072e41b8a1624a46dce4614551778dcff550f684aa7775e02e361e2e79028e6ac2ef04129052b723d8e63d8
SSDEEP

6144:q4Dx2lA9gQh7pi0wL6evuzlBPTNQVcDJYlPO2mEQYRnjHbThNarkYxIpPPM:q4FX9Dlhes7PTNQVmKlJmijHnV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dadfb843f67fb91c7c5a1ff269a937a7_JaffaCakes118

Files

dadfb843f67fb91c7c5a1ff269a937a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ