38ee995859c50d9d061e39b4b09ff562_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38ee995859c50d9d061e39b4b09ff562_JaffaCakes118
Size

207KB
MD5

38ee995859c50d9d061e39b4b09ff562
SHA1

a127da0204c0c1b9afd667bc3a1d3c81f50b9c14
SHA256

555f408c5cbadb44706dcfe1b2aa728db23b05a574953d3223331912ad1a823f
SHA512

cba8fea3a84209bb8744b28a2049e2e05310fe086998d77aa8d1ca721cac7f72900b68a5ba958f3212fd062abb1cc7d95ace615f6eab2b5c207f9001976ce377
SSDEEP

6144:Hr882OkZ8HREBdjROo4s293GHYM9Ij1A:L8BOFkRp4s4SlL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38ee995859c50d9d061e39b4b09ff562_JaffaCakes118

Files

38ee995859c50d9d061e39b4b09ff562_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ