f3248309940fcfa97b6ce67e165841dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3248309940fcfa97b6ce67e165841dc_JaffaCakes118
Size

777KB
MD5

f3248309940fcfa97b6ce67e165841dc
SHA1

29904b927a6fcfe35703df5cfd9d0f345610bf77
SHA256

9580decbec8055bf510dcc26924895c982f24ca83036f7ee203ba184195bb4fb
SHA512

9f20fca920ca5df41907b1a423d19ec5361c24cc8de9aa3cb21ee8904770a526fa139c9238bafaeca090bd1539a58457b64e97f8616cedd2f5a0d6a330f739ab
SSDEEP

6144:fFaTQYe70S6/AbSwv57lsyyKa6ijZeptdfEn1lTlIL/7bsEkV0Z1YiqaKyL:gTJff/AbhSZcdfq1lTlIL/7bXZGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3248309940fcfa97b6ce67e165841dc_JaffaCakes118

Files

f3248309940fcfa97b6ce67e165841dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ