f35ae9642531120a7de673fbf3a19be8_JaffaCakes118 | Triage

Sharing

General

Target

f35ae9642531120a7de673fbf3a19be8_JaffaCakes118
Size

39KB
MD5

f35ae9642531120a7de673fbf3a19be8
SHA1

ce26a243b3c0e48bf87abdf699a6b2dbab8ef282
SHA256

0a253f1382d7aaf803cf528f70c3060f2cffd71080798053912757caccca3605
SHA512

9ca06f560a41d89ad1b61fbb06a0c7ec12253919c46c6fbdc71fef1ad6fb1d1d459c68b001dcbdb7e6d2e547347ea84fd10fa264799cab907a781ce5eb90aecb
SSDEEP

768:x4793PZ6iUzpzM/z3uEXoXPNG+bPbAQtX+3j7BjPJOLg:xm3PZ6iUNzgulPN7bs0Aj7hgg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f35ae9642531120a7de673fbf3a19be8_JaffaCakes118

Files

f35ae9642531120a7de673fbf3a19be8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ