299e803823ed344710b846818f709f31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

299e803823ed344710b846818f709f31_JaffaCakes118
Size

316KB
MD5

299e803823ed344710b846818f709f31
SHA1

4967d4a0415793a2a1f124762c138cd2a2f47297
SHA256

ef8454ada843e361fff9a1d52e7f3e2b0393b00b3c0a66b9bfe788df09370bf1
SHA512

95b8ae25f146a7402fadad163ddb55aff67698e48578c1a12ebf359b27752334df4d545285ca7b356dfde3fe7fc75a122c57d4dde4d5c0c05f2320f30528fb77
SSDEEP

6144:SYssn+zHOgw+8zo8LB4EPVf9nd4gsZ6JqV2ZTJZK0M:SYJ+rknzvXRtpQ6Z0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
299e803823ed344710b846818f709f31_JaffaCakes118

Files

299e803823ed344710b846818f709f31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ