3ec6ced9d571fd4c68556c05a23fa6a5_JaffaCakes118 | Triage

Sharing

General

Target

3ec6ced9d571fd4c68556c05a23fa6a5_JaffaCakes118
Size

99KB
MD5

3ec6ced9d571fd4c68556c05a23fa6a5
SHA1

d187d31e5f4cb21fd7ba4a215b873b6d449e2a41
SHA256

dcebe2f0c1734da7b1a5f0a15ed7740e4f5454f4a125ce536ed981ba117bebc7
SHA512

f5e470965e124e4149be16d45455b4bb73e8a88f0bdfb9976121ea12016d4ac73fb1467998233b2e5e1b3dd0ada0d3d12d208025b809c1e6dfe5be46f07cb5c6
SSDEEP

1536:VTTwiKr55s25U0bftOsTe/zjalXi6btHKfS3QHloHtg/PffuJlEKiW7JlJSdmqFK:V/w/0220CaJDJHOxl6t0P3uE+ZqF0Kcz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ec6ced9d571fd4c68556c05a23fa6a5_JaffaCakes118

Files

3ec6ced9d571fd4c68556c05a23fa6a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.sdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textxc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ