f713462caee802d1c6c104a8f3eb7400_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f713462caee802d1c6c104a8f3eb7400_JaffaCakes118
Size

448KB
MD5

f713462caee802d1c6c104a8f3eb7400
SHA1

083689e875439b404cf04e1c81a3a2a56cf53b2f
SHA256

cac549cc4028fa615e239db20f433858c5b0e0b5ecbad23b7807a885c6d9a06b
SHA512

066ea4d77ed017e4a7640c2cd3613f6334a2c3be935e52b25bacccf2fb1c2d28688ed7ff260b7bea04ea41352874063ee89b1acae25fb985d97f1052d5f15dd8
SSDEEP

3072:7rTYob0HHkxLQUs0OYyFOxzvi2MuxYtcVtPd3Xx6Psl5Yp3C/XNs:7rTYobaHkxLQUs0Nx9MuxY+NdxCM2o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f713462caee802d1c6c104a8f3eb7400_JaffaCakes118

Files

f713462caee802d1c6c104a8f3eb7400_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

Nd}/I
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ