3791821d00d3055b60beb2d007e576b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3791821d00d3055b60beb2d007e576b2_JaffaCakes118
Size

683KB
MD5

3791821d00d3055b60beb2d007e576b2
SHA1

ce771182de58f69723bb9e5069ed5e9aa8ad0779
SHA256

461ef6306b20356b162136a1074b4067d679410a6211caf495fcef4ceece9ca5
SHA512

6cdbf2b575f44c343a996d09456dbcbf476378fea9810537842c996c4950c73250593116cb63b30f13211952ae1d391aca5b05e3ddd61cf9ca7efc231f066bcc
SSDEEP

12288:QpzuOEefvyZhPfoWGoGSZfo7EPY054pQ1QTvHz6yYEcUl6oKhG+xS6Y9Dg1DF+:GyjYWTG8wYAjTfzlovxHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3791821d00d3055b60beb2d007e576b2_JaffaCakes118

Files

3791821d00d3055b60beb2d007e576b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.sdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textxc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ