44a9638fdd7c196c08c7727e05ec945f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44a9638fdd7c196c08c7727e05ec945f_JaffaCakes118
Size

280KB
MD5

44a9638fdd7c196c08c7727e05ec945f
SHA1

c705ab3e8129bb132695a76556c2f5feec03fb6a
SHA256

9c7c346a540ef6fbf25c739f09675b7d31c0e1d1d647a5149829459dcc443933
SHA512

cecdbb8f567916be3502a0df4d4ab9276d3ec6f8e3f137fd5a817c91461c0ec8daaebe91c0375a773068c98aeed77e3350130b7697b432fb2f40c29b2fbb3df0
SSDEEP

6144:Mz2fwBG4BUrjkTfrWjXFfHBImxdz9BY5Rz:MS45gjmjWjfzBoz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44a9638fdd7c196c08c7727e05ec945f_JaffaCakes118

Files

44a9638fdd7c196c08c7727e05ec945f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ