fd4935eb912d9c4930617f2342e8c79a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd4935eb912d9c4930617f2342e8c79a_JaffaCakes118
Size

313KB
MD5

fd4935eb912d9c4930617f2342e8c79a
SHA1

649a7fd091b1404b8b8b80e20f17b9203f4b83e0
SHA256

69e0da285d4b57e15630ff7deb83ab5bcda1ccabb7c7e7ffee6bbe0c4f256464
SHA512

bc3a2ab629dddc3c624aa45aeb1fd9388ede4ee840c87e3e8e3ccfde7eef691f30cf5115e1c950160ea21262b67389bf8ca5534a3f9933ad2619f9c48426e09f
SSDEEP

6144:XFZT8qbTR7SquD4L8vioH/X8i9DLnHWcefjVo8bS5VBibtqL:1ZwgVxGq86oH/MKvnolg80

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd4935eb912d9c4930617f2342e8c79a_JaffaCakes118

Files

fd4935eb912d9c4930617f2342e8c79a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ