f45cd008493ed2894f94e85a9c053a4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f45cd008493ed2894f94e85a9c053a4e_JaffaCakes118
Size

9KB
MD5

f45cd008493ed2894f94e85a9c053a4e
SHA1

c5bec10b72bfd0dd0403ce9a1662482864b6d8be
SHA256

677e745fe7a620336f858b17b60389dd77e399034d2f73d3098042935609d405
SHA512

602737c6c48b5fb749b1203c372c0d611165a9592e1319df5002d917d20f86efa25c4b139d13f8e6a83376f3d6a0c371262cb9563901c4701019339c685ec1a0
SSDEEP

192:PBksurEXVwVH3eMZZ3093VnjdwCz+37bz:ZVwN3eMQFnhwC6P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f45cd008493ed2894f94e85a9c053a4e_JaffaCakes118

Files

f45cd008493ed2894f94e85a9c053a4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ