34c6dd7a442b24c8dc6e03f415f350e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34c6dd7a442b24c8dc6e03f415f350e4_JaffaCakes118
Size

4.2MB
MD5

34c6dd7a442b24c8dc6e03f415f350e4
SHA1

e803fc0a154174b28e3f0538bbf0f741d6315172
SHA256

f779ec64b4061db8e6259e06a44e58fcdd586c1f26e7d4f1dcecdd380ee79f1d
SHA512

1b620cbc0735935e668d608cb86556f0fa62decf93f4df6915e1efe7856807f5d7eff02d4cc65ee6de56a10fe01b066479450eedc90f98994f92e277e56a45b4
SSDEEP

98304:A+jgiQJE6LSFqVESekM+tfYBZvEqZ/OV:A+jgiQJE6LSYESek/fyhEqW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34c6dd7a442b24c8dc6e03f415f350e4_JaffaCakes118

Files

34c6dd7a442b24c8dc6e03f415f350e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ