3ed5e3d54419a1203cf3df498a5faf7d_JaffaCakes118 | Triage

Sharing

General

Target

3ed5e3d54419a1203cf3df498a5faf7d_JaffaCakes118
Size

100KB
MD5

3ed5e3d54419a1203cf3df498a5faf7d
SHA1

e72d2d3fd77a5f22477276dd82a22115cabc1611
SHA256

09bd40747509c7154b172de3b533206f8b5d9db8e205c1c1eaff353fe873059c
SHA512

5c8448fcfa2f97246a2ab6cd338f8e07e1710f6a9e0624d0199644a3ea2bc9fa7be079aeefb5a9e6d4bb09f17dbbf608776fd83cd0441b1c84e966559c06cf5c
SSDEEP

3072:/kEhuQzIcNQM/XApCvvvvZZWjlmamLQiI:8EhuQzIcbvvvvZZairI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ed5e3d54419a1203cf3df498a5faf7d_JaffaCakes118

Files

3ed5e3d54419a1203cf3df498a5faf7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ