217af44877e896d4d253fe3fe57ddcd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

217af44877e896d4d253fe3fe57ddcd2_JaffaCakes118
Size

1.4MB
MD5

217af44877e896d4d253fe3fe57ddcd2
SHA1

3ad08a144338f652ad4b8004c2d026885a587403
SHA256

0283bab16a85a733bed975bca76fb2214fb9e7eb1af00c46292e24f7ba517c8f
SHA512

c447f854431c3de67ff9cffa48c15681e770d9bba4a9d7b44619523df5ba3e1dc31524d6884916bf89a10b92a380d8104733967a88065fe7862af3f5f6758f99
SSDEEP

24576:lutsTLu0h3rffq9bjGkNzSdQEGKZOWozI/okviqfGGs:VT/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
217af44877e896d4d253fe3fe57ddcd2_JaffaCakes118

Files

217af44877e896d4d253fe3fe57ddcd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ