fa3d5b504712ac42e68f6c5d98598e1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa3d5b504712ac42e68f6c5d98598e1e_JaffaCakes118
Size

585KB
MD5

fa3d5b504712ac42e68f6c5d98598e1e
SHA1

a164c5bf7e2bb44ccece3d28ee4b7ae040c6f004
SHA256

aaf0400f83fd271800e1f4cb50fab438958eb3771a6b6a9401c5fa66c1c5b956
SHA512

efffbb1fc327cca754d9657b4d08659b3200128d43738b50803f63114ef0ad1e1142d8f5acdbe6d34c2ebc19b0066896198c4f5e8838b7d57d5ab3535d55ead0
SSDEEP

12288:ny3bU4N/HJRNwwC6dQ7HG+4FnjLlOhsxeHH:0fJrPZQ7HGhBpOyxen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa3d5b504712ac42e68f6c5d98598e1e_JaffaCakes118

Files

fa3d5b504712ac42e68f6c5d98598e1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ