2f67854ed4b8e05d2146d3577c8153ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f67854ed4b8e05d2146d3577c8153ff_JaffaCakes118
Size

6.7MB
MD5

2f67854ed4b8e05d2146d3577c8153ff
SHA1

143b6d9e0fb794deb8a0b7e37c26013ae8b0a85b
SHA256

c79f462b4325b704f662127521b631a67b8ebb2953fbb11587ab376b4bb06a48
SHA512

fd7b5c4a21418614e4acd5a1af3d2098c080478d718e52958662c73383a6cb13af22364cbedf4633e6d0053b0279cc5ed184fa74e3f8b887943a89bfac6c2e48
SSDEEP

196608:BGO0n9naf2sp80b0ArW4+NtkqRoP48s+Kktnv/:QO09Gza0Tt8kpP41+Kk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f67854ed4b8e05d2146d3577c8153ff_JaffaCakes118

Files

2f67854ed4b8e05d2146d3577c8153ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ