f330a25dea3dff19557aaea7c11d9d45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f330a25dea3dff19557aaea7c11d9d45_JaffaCakes118
Size

64KB
MD5

f330a25dea3dff19557aaea7c11d9d45
SHA1

4beb1348fc30975df828ecf8a3258628ffdbd452
SHA256

db826e93e388f4fbdc3ed7c485dc9a6eb1111fdb6eddb7944a3ed07f0a5d036b
SHA512

eb3168f4ffcddf9cd231c7538767a6b8cd64f57ffe1185b638ea4f5583da97bbd663bf32369cd355a3e6e33cd05a69cc0d94f23e5fad18041bd15ebcc2615ef7
SSDEEP

1536:kmTwkNylefMtOfMnLNwZY6XZOGqFcY8H2:NNwOaIZObFd8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f330a25dea3dff19557aaea7c11d9d45_JaffaCakes118

Files

f330a25dea3dff19557aaea7c11d9d45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ