1aab95329b9104f1a35c5ff41072bfc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1aab95329b9104f1a35c5ff41072bfc3_JaffaCakes118
Size

485KB
MD5

1aab95329b9104f1a35c5ff41072bfc3
SHA1

31ba1968ecb3adef618dcf6d714c3004efaa07f9
SHA256

7538acc86e898e139be7c6e4f31f4b801251c9e4cd22552e385337d29d7730cc
SHA512

af746dcec4eec98b01d4ced567c3a3b7383244aee30484f0c9d075b4610ee4f08ef923835c48c49c1f174cca46abe49cb6705098ace691cf7b50b54f9fe52461
SSDEEP

12288:cIIOEwqq3/hpiJZMzqEIf+TOatag7s8qlD:lbaDKof+KAs8qlD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1aab95329b9104f1a35c5ff41072bfc3_JaffaCakes118

Files

1aab95329b9104f1a35c5ff41072bfc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ