295a8b0bd78b375e906824b4d4c5bd00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

295a8b0bd78b375e906824b4d4c5bd00_JaffaCakes118
Size

220KB
MD5

295a8b0bd78b375e906824b4d4c5bd00
SHA1

befd73e4f6bb3133702f79e7e7de63e7de635e12
SHA256

0898f324074c1b62475313faa57c919fd3beddb1d4ed7418f7c83c533bd3d441
SHA512

0ebede6192482cdc853bdbff1cd81e4c822dca651eee57c2e07079f71629f123210eafe441250889cdd5f13c37d2676d02ac6bdf248e32563aefe1186b8887d2
SSDEEP

6144:zPqDfu/fy9ZK6R8Bz8eOd+E2CtrSSXYv8YmkmoPYz2:zPqDW/f2ZX48eOUMOgkmoYz2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295a8b0bd78b375e906824b4d4c5bd00_JaffaCakes118

Files

295a8b0bd78b375e906824b4d4c5bd00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ