fa51a99f025a419f8f7ac563d19a3ee5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa51a99f025a419f8f7ac563d19a3ee5_JaffaCakes118
Size

641KB
MD5

fa51a99f025a419f8f7ac563d19a3ee5
SHA1

3ac5026b2369e3121f06f4ef8604c7f080b51d44
SHA256

e60e84966abe28d739cd501c03fd7140e85c7f8cafccc4887c275c0f25e4e691
SHA512

bd20acec1620d2a71a3b2215f903b5a8e45ddaf09f3eb42be173f94030c1a7638e065132a76728306c05d799008a78b4ec6f94b27b924ea164e43bdbdef97fd8
SSDEEP

12288:P3SGl0gnZ5eA1Go0/6K6Qjano8ZbWs0r71VqbO/9PfH0mXo:/kM513yKmY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa51a99f025a419f8f7ac563d19a3ee5_JaffaCakes118

Files

fa51a99f025a419f8f7ac563d19a3ee5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ