30a76f7935aa35cb2a5e6b1bd4d6aa49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30a76f7935aa35cb2a5e6b1bd4d6aa49_JaffaCakes118
Size

216KB
MD5

30a76f7935aa35cb2a5e6b1bd4d6aa49
SHA1

8f0b90f0b390e14c59b30a058ad0ab3f183c2cde
SHA256

eb606715536a7272bbb91781d8950f65e0bb29bd9eb5fabfa797db89a3397174
SHA512

24f132df2b302e1e051d2ca2ee80f88fa0aa9dde81902317efe8cdb3bce9e6cf41cb61499b597c565def250ece8d0ab6061c798955df9e0f71699ae341840e4c
SSDEEP

3072:ONxy5AGCerPmKP5jleSejwFnYHzXLFAXdhS/fJIqX03yS:+yyTSPb5jETwZYLJyk/a203

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30a76f7935aa35cb2a5e6b1bd4d6aa49_JaffaCakes118

Files

30a76f7935aa35cb2a5e6b1bd4d6aa49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ