11f17c5bc4d561f50c1995ba308e5e6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f17c5bc4d561f50c1995ba308e5e6e_JaffaCakes118
Size

66KB
MD5

11f17c5bc4d561f50c1995ba308e5e6e
SHA1

8771ffc9d66586006582525e2a14509612841987
SHA256

576ce5cb99a17675f3fce4b4cd19a39a2854f9214d136212983c70ceb511ef5c
SHA512

09cdf07ea9e2cfd3af052ce3c105afe75ca2f3409bdf6c566fe344a9cefcf85fe8d63aee9d0db76d439758581a22ee79d56efdc1031d5ec26b536c38c1820ee5
SSDEEP

1536:FWdpZxGjpzbAz05av6dHUBQAKRsz05av6dHUl:gdRGjpzbARazRsR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f17c5bc4d561f50c1995ba308e5e6e_JaffaCakes118

Files

11f17c5bc4d561f50c1995ba308e5e6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ