0949e0855716775782704a5ee549b726_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0949e0855716775782704a5ee549b726_JaffaCakes118
Size

739KB
MD5

0949e0855716775782704a5ee549b726
SHA1

403ef2d497876437e54162de7a43e8b2b7f21122
SHA256

b210304cfc46f946ee32f14c6c680a5b72a19a6fd27fd53f5932ed15200b9435
SHA512

a71df38049b930c00a43573b6ed2a4a3d549df2aa694b10b730ab0415790aaef5da565f26a3533747e7ee37ad5522106e3fd6120e3d6ba0936a582c2678aa929
SSDEEP

12288:qA3iJ8wbV2QN46fJjdFfZUdnVYlpIw4bkvBsd9l:qA3IRVN4gjTfZaVYbL44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0949e0855716775782704a5ee549b726_JaffaCakes118

Files

0949e0855716775782704a5ee549b726_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 579KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ