3348ba4b841398dd6f5bce9716eafe7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3348ba4b841398dd6f5bce9716eafe7a_JaffaCakes118
Size

1.7MB
MD5

3348ba4b841398dd6f5bce9716eafe7a
SHA1

87e18acd1341529964221000a2b97afa3ee6af37
SHA256

1f4ceb0ecf0db847e05598bf7e0bc06e0427f2f1bfb28876aa2e0c0f7bb108a2
SHA512

75b4e3fe4fbc1125823b551fa63b600912ead26587b288a5dcb4b53a2d5edd515a1920dc8b58925a59e3cf036b6b756c54659d149a7628270d5dfe23dd01233b
SSDEEP

49152:H6hQ2EU2q6ByUt9cDuXG55n9QdfXWiVUT:HqQUB6fyDb53QdfXb6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3348ba4b841398dd6f5bce9716eafe7a_JaffaCakes118

Files

3348ba4b841398dd6f5bce9716eafe7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ