3d92f48a461a08e692ab8196951c03c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d92f48a461a08e692ab8196951c03c2_JaffaCakes118
Size

772KB
MD5

3d92f48a461a08e692ab8196951c03c2
SHA1

3fa5c3ee819b5544ff60b5f5a680245ee0de576b
SHA256

b841ef4d8e7903e497970874b3ab8b59f29be9901d9b316179aa3261728c11de
SHA512

5c1d0deb2f1dc8f818ce7d3a843e42c470fdf0b2bffa993bc640f1e9fee7c6a296e78f05597eceab839830fde0f91aeeca70c0052d5bf476f20887918770b275
SSDEEP

12288:LjpZGaDuAFaBRoeby9EzoQnSq/vuMZZARzVDY2WbiwdtDR:/pZGaSAI7mEzt5/vzDAF222tDR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d92f48a461a08e692ab8196951c03c2_JaffaCakes118

Files

3d92f48a461a08e692ab8196951c03c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 364KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ