fd16c44a1f7a69924330fd6041f051d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd16c44a1f7a69924330fd6041f051d8_JaffaCakes118
Size

9KB
MD5

fd16c44a1f7a69924330fd6041f051d8
SHA1

600f7d074ede85b5d16ab932c59848859ae6bde8
SHA256

cd28f7afc61c50656f14582aeb1c14722109ad330bc8ab42c68c0a322ba5928d
SHA512

376542e6da4d114d7e2cd7b3fedc7a4c3beb95d87488e866fce4357bc2b8aa0100e8923feabe569d9395116562f34a52954f28f9ad63a01570031aa86f9e07bb
SSDEEP

192:IBksu3PY82gQv5F4itceMZZ3l93VnjdwCz53mH0:k82l4itceMnFnhwC92H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd16c44a1f7a69924330fd6041f051d8_JaffaCakes118

Files

fd16c44a1f7a69924330fd6041f051d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ