3faa9bdb96ff0db554dea1340558cdcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3faa9bdb96ff0db554dea1340558cdcf_JaffaCakes118
Size

75KB
MD5

3faa9bdb96ff0db554dea1340558cdcf
SHA1

881ce15a5dcee048dd4ec40f29b3dea282a1f22a
SHA256

a39811f174bd93fcc0d8e71bcdd1da3ed452b3494bb5d6f7a336f15981389354
SHA512

f0d3dd325a7928284390745b452b6d061108ec31aa0a3c2f30cf07f00dfa04491caccee88f35671693317c6c55c61e65782c08d0eab7262f5f2a0cef5d8438cc
SSDEEP

1536:6e5E4pX/hN+8YCQ0RqORGb41F6rg3YS75ifSvVj6Y:6sBntRGU6rg3YS75iWP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3faa9bdb96ff0db554dea1340558cdcf_JaffaCakes118

Files

3faa9bdb96ff0db554dea1340558cdcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ