1a9f050845f1f7ed561182fbd870398b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a9f050845f1f7ed561182fbd870398b_JaffaCakes118
Size

284KB
MD5

1a9f050845f1f7ed561182fbd870398b
SHA1

1b8014f943d40ae00489cf209142c1bdc9764dfb
SHA256

b8b7dbbbdc177929e3b93b685bc095dc06fdd627da0262b4b78dd6b0208fd1e1
SHA512

b415c102b8224d043fe40353095da965c2d56ee7765f2cbfe230d5ed2b9d6ce7e11d53b00a95918c366d848a67e2ad79f236984f284487d130609781ea9383db
SSDEEP

6144:eCTI2IOGdpDpB4SgctfMLyI9rJ8xl3ucBu0p03t:eCTI2IO6X4SHtELHADNBu0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a9f050845f1f7ed561182fbd870398b_JaffaCakes118

Files

1a9f050845f1f7ed561182fbd870398b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dell\Desktop\f.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ