fcf393b445d4f0b001d53e097db8e5fe_JaffaCakes118 | Triage

Sharing

General

Target

fcf393b445d4f0b001d53e097db8e5fe_JaffaCakes118
Size

71KB
MD5

fcf393b445d4f0b001d53e097db8e5fe
SHA1

8c46fdbab506cd8aa5cdec4a6347e9c655c387e3
SHA256

6d42ab03dc8bf128ef84fd8c6a33b113ac9961077f72ab94a353a5e4f05aac61
SHA512

d30371c10b63ce8a9649de204e19769f22b0e9c1a15938418556e79c4df2d80e72322f24afcfe5c0f2a6b02663c174c76f0e0c6c4bd923c1cf1f5b1e3fb4eacb
SSDEEP

1536:H9WXJ4FGFYQRVU6EkaS3Ystx7Adpf7PS5TSVHbFqZKdMF/gTwHMBy:UAw26Eka1sLeZ7PS5TSdFqZFoE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
fcf393b445d4f0b001d53e097db8e5fe_JaffaCakes118

Files

fcf393b445d4f0b001d53e097db8e5fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ