4216749917884a61137a618188be5575_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4216749917884a61137a618188be5575_JaffaCakes118
Size

142KB
MD5

4216749917884a61137a618188be5575
SHA1

72e38c8f9033450904d31f459b17e4c54fd99210
SHA256

42ec98d3d1143781e9eed2541badb9cca4b79e30e070dc6857236acf0c5b80e4
SHA512

654aae1372b78306abe2114ab623aaa78c6dda0aec43e933bfb787077108c820d8fa967c6d4d3bbc04e6b821950e6856e06acdef1f77c2876b96421f631014c1
SSDEEP

3072:2bK6yLt5vsjQ/d+aLbWUpnQQaS/R1VflveO5d7cTg0eI:2ox2WGQaS/R1VflveO5d7cTg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4216749917884a61137a618188be5575_JaffaCakes118

Files

4216749917884a61137a618188be5575_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

cM{^x-'
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ