fa84498e7c2f782eb7e2fbc031f70859_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa84498e7c2f782eb7e2fbc031f70859_JaffaCakes118
Size

1.3MB
MD5

fa84498e7c2f782eb7e2fbc031f70859
SHA1

cbc9482a3e102f8f2f76b07424b7580c475e7900
SHA256

85d66b1ddbd5ebdb7be3883335db72866c2c3a51f96a81655af51e6f139bb228
SHA512

36e32b1df238c22840b8d1dc9351fe13ce538bd4efe3a2a31d6673404133457c2084e8bd9a3cda15f5b71c88e16261f3884036042d0975b8feabf21079413b62
SSDEEP

24576:sQ1ftboSzyRuGj6N/i44rhXZNus89UrmMnfk/iQ2+S0dS:syt/MuhbcWsaU9fk/Pjg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa84498e7c2f782eb7e2fbc031f70859_JaffaCakes118

Files

fa84498e7c2f782eb7e2fbc031f70859_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ