f950fcf1907b77be71d3a47622721bf5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f950fcf1907b77be71d3a47622721bf5_JaffaCakes118
Size

14KB
MD5

f950fcf1907b77be71d3a47622721bf5
SHA1

f5296e81f3bb173148758d0eb85e9d990fcf992e
SHA256

097295e95e01b03f1e6ec26a148e5a6dffb636f5d0e674702bb80a645db66ca3
SHA512

9ad28ed8f1a20b50129e7573538a18a73d1de04c7ccd5916be137cf51fb2c34ffabcccfd09edf63b3f08e02ee6ccd035667295296ec3f12546f1a2a944ee2d72
SSDEEP

384:uObfOKdmAA0MjiO/nMK6NaUk128FSizSaa:rbmXimiszZ9a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f950fcf1907b77be71d3a47622721bf5_JaffaCakes118

Files

f950fcf1907b77be71d3a47622721bf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ