1a3e31fe582292a7ac35d5fe6a6b4f41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a3e31fe582292a7ac35d5fe6a6b4f41_JaffaCakes118
Size

141KB
MD5

1a3e31fe582292a7ac35d5fe6a6b4f41
SHA1

0294295fcea900bc5c53ee32b3200af1140aa07d
SHA256

9019a4897c3b88dac61948f4fdf10fcc5e5a2d692b975fdfef03c2ca24e8f379
SHA512

6d66336165ee74d924ac4e0c038008fe6fdbf4b20cecdcb5822703348f36c989b46f288635a8d8e9caf9d0b33ac85cd336e5d07787eee89161e1ad81e46cabac
SSDEEP

3072:EGZa8uzF3g1Wu7utuxusuWu2OnBQlbGGWaS43vC:EEgF3MzOAGGxS436

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a3e31fe582292a7ac35d5fe6a6b4f41_JaffaCakes118

Files

1a3e31fe582292a7ac35d5fe6a6b4f41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ