fc0ada1226b3666b5875cf6c4cbe07d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc0ada1226b3666b5875cf6c4cbe07d8_JaffaCakes118
Size

78KB
MD5

fc0ada1226b3666b5875cf6c4cbe07d8
SHA1

7404925277988f1ffab7a2bf9400d51a837923ea
SHA256

a631d8a8d5d3821bfd0da928365f7b7bb4921461652c5a5b2c406e61f9c23a62
SHA512

e87923f1ba24d9f646bfaf1ca01e7e66174defdde0d4ce2b65da23e78f59a9cc9492626cc25dc5440b9c51c47ad33aaaf37c5a98dc74062925d6169e1ed68807
SSDEEP

1536:75jidy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtC6h9/V166:75j9n7N041Qqhg59/9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc0ada1226b3666b5875cf6c4cbe07d8_JaffaCakes118

Files

fc0ada1226b3666b5875cf6c4cbe07d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ