3c6270a3804a0bd1c1f7316a4500ce1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c6270a3804a0bd1c1f7316a4500ce1e_JaffaCakes118
Size

56KB
MD5

3c6270a3804a0bd1c1f7316a4500ce1e
SHA1

a134ddae98db101dea28281723e75018c1ff4564
SHA256

38ff3e679fd0e5ca6868230a93d6b6ed10dc806a0f9468b18403757066f28b2c
SHA512

e6af3eefa6a455c8d712bea0ee62929aea6b11fa33355d6ea0a5188539715806c1e5067cfd8e494c4a62eb9d4218abc049bea066174b89f0afc9dc7919c65112
SSDEEP

768:ZGjLBDyqm9FAm4ETMEvIuJJB7PMlOsp6HOpnyUTUZBg2qQP:ZGfBDybBTAWBLMlLRg4l9QP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c6270a3804a0bd1c1f7316a4500ce1e_JaffaCakes118

Files

3c6270a3804a0bd1c1f7316a4500ce1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ