04b0e9756c6a99e16ba2dcf6cc3953e2_JaffaCakes118 | Triage

Sharing

General

Target

04b0e9756c6a99e16ba2dcf6cc3953e2_JaffaCakes118
Size

180KB
MD5

04b0e9756c6a99e16ba2dcf6cc3953e2
SHA1

30976bfc2e832aad5a38ae513a436a3ebc878ef8
SHA256

c180324ea070eeccd6ef4e5bca8e276ece2334f6121bf31367efc033ef0a49dd
SHA512

322bdbfa4619ed5f4253d06c68fd2216561197abde2081e62d5c07d77d35843b9b5ec2b34b8e7b716761d0666d4cf444ec2c09862a7383ed62587f53d9016b2a
SSDEEP

3072:jJtQMdQ9o6LrPMJB7GPTMy6LC3OKogH9fsdMLtIji1xzt78lCDsw:dCr0nqPI/LC3fogHJsdMRIot7wCDsw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b0e9756c6a99e16ba2dcf6cc3953e2_JaffaCakes118

Files

04b0e9756c6a99e16ba2dcf6cc3953e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ