fcba619b69c2a79b693ac62299550e65_JaffaCakes118 | Triage

Sharing

General

Target

fcba619b69c2a79b693ac62299550e65_JaffaCakes118
Size

92KB
MD5

fcba619b69c2a79b693ac62299550e65
SHA1

ae4aeaf02c10d34bceae54681a6d4163131d075d
SHA256

e2c0e7e1d5a9250a62d80cc81969c49cafce9df6420198f72821a27e03e30080
SHA512

83a7deed90988f82030d0565e969bc820bb357955f77c40ca5dab58f937f241278f5719bf8d423853325b311164193bc84e99ecd768d624c60951d83268b165b
SSDEEP

1536:8Sqw+nSR7Fr2nCHyb+aKY1SvTB8p8IdG4eFAOdX1:Tz7B2nC3Od8ILeFD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcba619b69c2a79b693ac62299550e65_JaffaCakes118

Files

fcba619b69c2a79b693ac62299550e65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ