fd517722ebc659a6743485197380f1ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd517722ebc659a6743485197380f1ef_JaffaCakes118
Size

294KB
MD5

fd517722ebc659a6743485197380f1ef
SHA1

811588f91286938b41ea69fb51a9aa58428a6e50
SHA256

57fc3bc0812e81b2b50ae1705b5b5d7b357cb7ede8825c9e9883f37913b36ce0
SHA512

cb6f59e49a88ac8ddd1f385446cf492c4e22b706404837e6eeeebcbbc8314bc0d22135374ba6f1b40adece336402161ce268b66b979d373084d8a332d5bd6d41
SSDEEP

6144:HhweSKPkVPBkR9cUMPEFE004OVAsfh2InlsgUzeuen6:BzSK0BmcdPgE004OVAsfhBnlizt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd517722ebc659a6743485197380f1ef_JaffaCakes118

Files

fd517722ebc659a6743485197380f1ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ