4e291116b85d792241f417855df68615_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e291116b85d792241f417855df68615_JaffaCakes118
Size

654KB
MD5

4e291116b85d792241f417855df68615
SHA1

e3489d7d962f4c40ac30b6d92eb72d90c021d14d
SHA256

9c8e0289e69779eac13bd1a80f98150e4a1fcdb5856979127a8fe57639234b60
SHA512

17e5d8610bb870bc9ac53722436e9ecf9e36fc5dc1fdd884e1330869fc743952fe0c21ef47173adaac6c3a450fd84fab16b1326087f4aed211e50d520fa23601
SSDEEP

12288:OzWBqqmGtTXA5u99iQYA0KK2d8K+Z6LhD9TLNj:Ozw7PtTX/9iZWd8lZ6VD9TLN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e291116b85d792241f417855df68615_JaffaCakes118

Files

4e291116b85d792241f417855df68615_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 503KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ