3c498763a89946cffede5ea0f2617d62_JaffaCakes118 | Triage

Sharing

General

Target

3c498763a89946cffede5ea0f2617d62_JaffaCakes118
Size

52KB
MD5

3c498763a89946cffede5ea0f2617d62
SHA1

5466e615fa7b1c73cb5e6116792a3775d943806c
SHA256

20c27c7910972a56e6033f450e32d2b76152563d26c9bd83470b190f2ae86ef2
SHA512

a6a7bcf3ec4ab4f56572b348a8b596b79c5470230d6d69998533c357bf433db63fb792ef5ebf5c2d591d23fa2560435b14b4a0bba07960b6f64cc8b2497c31b9
SSDEEP

768:IGtuY+8rdLFKzE4yoids6u3E9wsh4pCPR5mio1oHwXV:I1YZdLIQ4yoGs6u3E9WC5Iio1nF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c498763a89946cffede5ea0f2617d62_JaffaCakes118

Files

3c498763a89946cffede5ea0f2617d62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ