f3c386dcc223e3c67666c052792a04ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3c386dcc223e3c67666c052792a04ad_JaffaCakes118
Size

9KB
MD5

f3c386dcc223e3c67666c052792a04ad
SHA1

f856096ce8d126af8e18f619134e7761261d8ad8
SHA256

61d29191eb2c308fddca9f122febec62cb1643bb5190b58ce7103e9181369c3e
SHA512

8f2b856e87ee58ed6896f8d3b960276400a940130e708b1fcbf6b73c40f45703562ab41a4a8099eadd3da3039b22006b5ba7d2a6d25e9dfe49a48e9ad93e6131
SSDEEP

192:dBksuDm6N7oy1gD4eMZZ3m93VnjdwqzSs3GtLQFI5So:54x64eMKFnhwqlUQI5S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3c386dcc223e3c67666c052792a04ad_JaffaCakes118

Files

f3c386dcc223e3c67666c052792a04ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ