4dec6cdaaf2352cb350d08be8d026d99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dec6cdaaf2352cb350d08be8d026d99_JaffaCakes118
Size

284KB
MD5

4dec6cdaaf2352cb350d08be8d026d99
SHA1

eeb61b8e153327ef67815688c8d5f312895c1b74
SHA256

29f72f782d59f09f98399c3f34fbddab633ad47ae40fe435c4a4c674930dbee7
SHA512

5e969af0c165d0ef3299a8000546890fa4b55450ac46f0eab912a998cd46148f6bb6b3b214791c173c0197ce7ea70a097d8111dea0754bfccd690dba647756cf
SSDEEP

6144:8STQpWZ/jURZt6hD5tYVAP3qqLdok80q3AIYE:8STlZLOuYVYaIdok84DE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dec6cdaaf2352cb350d08be8d026d99_JaffaCakes118

Files

4dec6cdaaf2352cb350d08be8d026d99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ