0299f1ec0685cbddf646dce190998651_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0299f1ec0685cbddf646dce190998651_JaffaCakes118
Size

635KB
MD5

0299f1ec0685cbddf646dce190998651
SHA1

f02f788ad4e3208ac5dd0e4cf3b08efd0d0318ef
SHA256

4cb2791543e9ec7415d2d085008c45f3c246739a7f60e755f9bec2129a004405
SHA512

79c5329134e28950af1f276a41fbd2ae89ef1123a51b9cb75f09f192649fe7ae0f0a463dbf6aeec417caa75f09ffb4eaf878df4e0593edc1910f9bab6a0b82c6
SSDEEP

12288:r4IpyhkncCvlsfR63b3FDr7hBJJWaAEfU5hmMDFxY:r4YyhmvCRgrFDjlL0FxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0299f1ec0685cbddf646dce190998651_JaffaCakes118

Files

0299f1ec0685cbddf646dce190998651_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 578KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ