624fe62b014d70be4beb1821788c4007_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

624fe62b014d70be4beb1821788c4007_JaffaCakes118
Size

240KB
MD5

624fe62b014d70be4beb1821788c4007
SHA1

ce1e86fdef486c21884eccc2bd62a27968aa3636
SHA256

4d191f76c4e86d122c5d947ef551cbe82c373da66b78d8f9616d44e2d7000ceb
SHA512

e632f45a2a85e69d4b28b2f8abed9ed7c0a9c6d38a9a889db979a6ce6f5677f5e2dc2766eaaa128c94d5bfb45202bf9937de12af052a162828128405fc606bef
SSDEEP

6144:c+cYP+nbyUArqZffTqk9TXL6hX3a+EacT8FdOA:cHe+b2rGff+k9TX0XFDF8A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
624fe62b014d70be4beb1821788c4007_JaffaCakes118

Files

624fe62b014d70be4beb1821788c4007_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ