292171157660b732e1e4a0f304088fbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

292171157660b732e1e4a0f304088fbf_JaffaCakes118
Size

198KB
MD5

292171157660b732e1e4a0f304088fbf
SHA1

0d42dec370ee0f1dfa04f4e3a99172aba5f964c1
SHA256

ce64bcad160f377e884b668672030a3cef081a8dac3c2773fc1a7537a4165315
SHA512

47400185b96356b8e7ab8f081870ddd241783652160bb91165b801e871211d868ced8e752525e7783694379f822d34a44abd998c538aec6c438f8c1362aed77e
SSDEEP

6144:fcdGUkVGzeT9K/aNig7dfHqYoqVzG/ksdl:fWG6zeTUCNig7Bqx/kMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292171157660b732e1e4a0f304088fbf_JaffaCakes118

Files

292171157660b732e1e4a0f304088fbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ