295a0682ca81e6fd630c573ff189bdc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

295a0682ca81e6fd630c573ff189bdc1_JaffaCakes118
Size

16KB
MD5

295a0682ca81e6fd630c573ff189bdc1
SHA1

138cb453e4976639295809d897b0ee57b440c9e5
SHA256

2eb3741af7deab31f45d444ce2b61af69cc310a195e25b5543d8ec04cf70461f
SHA512

1b46f9f72d63fb366be8c052dcd65c00086a80f70122a0805cbf4db81852d59c829dbf444ee2206f0c0445b4bd7d2c183e285022d6154591f8a0bccedb929d17
SSDEEP

384:qJ4CrEr7gkUCJ5Tc2XN4INxhZvLTtD3Ialuo:zsRCLc2Xb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295a0682ca81e6fd630c573ff189bdc1_JaffaCakes118

Files

295a0682ca81e6fd630c573ff189bdc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ