3cf56633c72ab08cf89b66a1c5aae243_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cf56633c72ab08cf89b66a1c5aae243_JaffaCakes118
Size

68KB
MD5

3cf56633c72ab08cf89b66a1c5aae243
SHA1

23191bcdc7e3581c98f675abe3c6d13a8435287a
SHA256

17d547a0e96f110a88434ad585fd6d105fab64ace7c8405d8a706d13842a95e3
SHA512

ed6359c323ac29352b47c24fb6badf242c90e13418dfd75ce809ec665e06fa0378a06728841fb7cdb974caf5fceb0fa7c1be681626f9145c563a57a9f2710d6f
SSDEEP

1536:9g37saoogO+LgtFRv0sFdVPNaU7twD8MkgQEoBJ:qwaLB3R8sXHaiJMkh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf56633c72ab08cf89b66a1c5aae243_JaffaCakes118

Files

3cf56633c72ab08cf89b66a1c5aae243_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ