f698875d0e3bff6a1231354d149d8c3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f698875d0e3bff6a1231354d149d8c3f_JaffaCakes118
Size

400KB
MD5

f698875d0e3bff6a1231354d149d8c3f
SHA1

14295248f0e34f72805efbfab92129a3c865c1f9
SHA256

b993e86a06bcf7fc229bba82a7191a2d5b67a298fdd9c6e84d5693a1365bbe0a
SHA512

24631a383d270f31a6cd2385b993cb13d82bd01648a8786a6e1f4914da9511316b6facbb816455b59421e25ff5305edf9b616e9e6db7c99f481df089e93ff1e7
SSDEEP

6144:0n7tYSwDD1vpXAmABL9OEBnF+A2y/z8H/7c2AMGWCnmJrP+:oeS6D1vfqZOEBMA2y7Q/VdCnmRP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f698875d0e3bff6a1231354d149d8c3f_JaffaCakes118

Files

f698875d0e3bff6a1231354d149d8c3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ