3711f04aeff95d15371051c3114411e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3711f04aeff95d15371051c3114411e4_JaffaCakes118
Size

50KB
MD5

3711f04aeff95d15371051c3114411e4
SHA1

4c0f43d62e2fea9460bac2d6695712b8b230b2bb
SHA256

d1752351170dcde089d52ba26e5af26f602ba396ec2913f2084dd3ed1d9b4d15
SHA512

9385489bf075ec2604e09b8e7bff0ad2a768d3e27716815d99e2cb25e9fb5aaf0a1d706226978b1bb603cb3ba3be3350142afd1ca1b8bc86f836a5c68fbbffda
SSDEEP

768:yuVEBc8xo2YUjEA6uiUl14s+FbzhdXXRt/sP+ci2TJ:bEBc8xo2auiUwnFbzPXXvpk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3711f04aeff95d15371051c3114411e4_JaffaCakes118

Files

3711f04aeff95d15371051c3114411e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

helia.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ