3822f08fee253b0a5f991060448a8d89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3822f08fee253b0a5f991060448a8d89_JaffaCakes118
Size

430KB
MD5

3822f08fee253b0a5f991060448a8d89
SHA1

a0f9927cae5eb8b4bcff92770af1103d013f62f5
SHA256

baf0d37594ee5ea229ecebba3bd81105aece7f4363642659f24c186b41c62e1a
SHA512

c59e28bd70c802a4fe01bf3e1f6e46169a570e4acde393ae4775248b39c085b8637db3f5c97c9147be76e110c781f9a0b5568e1a126939559cff1b2859c7b6f3
SSDEEP

12288:7bWO1DgyWhSAdOTNg+2m6rM0hwCOMOpm8l:G4G7Ohg+z6tOMO7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3822f08fee253b0a5f991060448a8d89_JaffaCakes118

Files

3822f08fee253b0a5f991060448a8d89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ