f23e4358306ff0a0d4923557df7e6b4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f23e4358306ff0a0d4923557df7e6b4a_JaffaCakes118
Size

1.2MB
MD5

f23e4358306ff0a0d4923557df7e6b4a
SHA1

496df394ba5d299a04effc62ba651892ca7c1872
SHA256

60d54fd4d8198b218da725695a2e4e804a2e150d96700f9fea2a628e1f1ba2bb
SHA512

ca10c63b71cbcf80f2afb28dd02deef24e13853dc0a875117d1c43b16212ad37b7b534046b700bed0c0523479f901e45146aa7d0cabdc5ab72fc45c52c4190e8
SSDEEP

24576:fSb476DOUfx8Dgyfx8DgQiV6VEDCfQXLNwDZqSL:e476B58Dgy58DgQigVISQXLCZ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f23e4358306ff0a0d4923557df7e6b4a_JaffaCakes118

Files

f23e4358306ff0a0d4923557df7e6b4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ