0a3e3bd2c3950d1bb60cda300ebf386e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a3e3bd2c3950d1bb60cda300ebf386e_JaffaCakes118
Size

56KB
MD5

0a3e3bd2c3950d1bb60cda300ebf386e
SHA1

ff7af88d3cc86e645dd3d1124dc2c59b49da0eec
SHA256

4a7bbdd57ac54b1be68b115800204998e551dcf7fa716d2936b30074ff14b24d
SHA512

10eec7c1932618b3d7e0bf714e21d804414d4144b90ff71a649fe4d21c85388dfaee396766c9898f50389b8efde1ef2c28fda2d16c42a9f4f696b9a50fe9f458
SSDEEP

768:PyeHDOBSIOklX7bgEFK6H7iZkzDOcT0lR/Q2a6:wm0XwcHH7AoDKlR/3n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a3e3bd2c3950d1bb60cda300ebf386e_JaffaCakes118

Files

0a3e3bd2c3950d1bb60cda300ebf386e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ