fa36788c0488fe6f660e5ea1e9ca277a_JaffaCakes118 | Triage

Sharing

General

Target

fa36788c0488fe6f660e5ea1e9ca277a_JaffaCakes118
Size

36KB
MD5

fa36788c0488fe6f660e5ea1e9ca277a
SHA1

53480f3fa2816783ef36f2530578912d19df7c95
SHA256

5d5a4e577c7e58c88e50a4c6553943a861ed52728255a3f549ab02d673853a70
SHA512

5347c001b4699dbc54158277475cba0ff99821fd459c501279e5d3e0a802cd62b2685cd41a42645d2d098b05733f03ca9ae0a98f69f395fd7ae77ecd20d751a8
SSDEEP

768:YQBpo62G8V2D8MfjARy4l8YeETdS27iqgiqLFmbP:YMpo62xV2D8MfjARFjBV5bP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa36788c0488fe6f660e5ea1e9ca277a_JaffaCakes118

Files

fa36788c0488fe6f660e5ea1e9ca277a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ