fe1504cd892672b947b787cbcfc197d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe1504cd892672b947b787cbcfc197d1_JaffaCakes118
Size

468KB
MD5

fe1504cd892672b947b787cbcfc197d1
SHA1

d01b5a2e09935a4bad1b8a4cb9780867786f10bf
SHA256

16d016cfc30f9c5572ceb554d5a38e68e943e6743cb1319f7402714a45d47f55
SHA512

09c325665c0a30c58d39e8ca2a5dcc0885dd99603396d26721ac1e3a25f2c75736e8284f6f55f283bb9014763d64395fbc163e56b6b86cb832dbf3869f1626d8
SSDEEP

6144:1vy5fYL21OwfqdADreVvfOQozUBATRT3sAy8ruVo7LWdus:15i7uVeQguIRT32O7Kd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe1504cd892672b947b787cbcfc197d1_JaffaCakes118

Files

fe1504cd892672b947b787cbcfc197d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 464KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ