f3483916df7709f7040a0fdbc0a93cf0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3483916df7709f7040a0fdbc0a93cf0_JaffaCakes118
Size

220KB
MD5

f3483916df7709f7040a0fdbc0a93cf0
SHA1

f79fcb9ce2289b77c741f14fe028b3b533714881
SHA256

fda7c844961ce83812f27b499c13e2271c2da1b60dc93e0107a6b7708eda5252
SHA512

ffd15f12a7a46d6163dbfb0faf54bce7d10c0f6b404bf89d408b50bd84c63936483a54cca0423fb80dda265189c2a21819398c50c089f140684fe43bcb0f0925
SSDEEP

3072:s22blb22NkSKYXS4tZheS2Q10V/nMHzKN9te0ClYCJ16q7FvsqY:X20gXtUH9gd96qpEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3483916df7709f7040a0fdbc0a93cf0_JaffaCakes118

Files

f3483916df7709f7040a0fdbc0a93cf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ