3a1097e4577bf7864a6709b952ebbc2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a1097e4577bf7864a6709b952ebbc2c_JaffaCakes118
Size

501KB
MD5

3a1097e4577bf7864a6709b952ebbc2c
SHA1

c68d172ac9cc99169f16523dc026b979aef498be
SHA256

1e48e299caf273c82056596b13ee00c8cbd1ecbf4ae100ad1ba8d71a5a226007
SHA512

11d3d6239f5b3298dc6364b0d839246dc62b39962d3506cae660696bced5b1b9baf157fb0fae4e7881726264ea995ac305aec130078c653a11645602cfb4d3b6
SSDEEP

12288:hfsocc0WhhmU1OmCnvra0G0iXNONKiHt9Ef7yfhn:Jsrc0WhUfVnvA0iXEK8jEf78hn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a1097e4577bf7864a6709b952ebbc2c_JaffaCakes118

Files

3a1097e4577bf7864a6709b952ebbc2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 498KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ