fc28fba321209669f433673f40d37c54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc28fba321209669f433673f40d37c54_JaffaCakes118
Size

131KB
MD5

fc28fba321209669f433673f40d37c54
SHA1

47a1827e4e684219006f25ed6f265cbe50d55223
SHA256

8ad597ee1c0bbb6aaba938179a5512ff894b726d799024723d27d59f98030b4e
SHA512

9292b8ffe1002d60a36c84717bdeeac4033011b5c7b3196e334c60718e79be5ecf5a0f2dc940dd99c7432c1ce100711ec61bbadb4d7c9974695c617cb165cb63
SSDEEP

3072:qIMOILtFgGlMUrDi5QN+U0ba8RLPFYkN207XdN:qIWFLl3aQUU0bNtPFJNH7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc28fba321209669f433673f40d37c54_JaffaCakes118

Files

fc28fba321209669f433673f40d37c54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ