4615f86fb2494b1121fe39a3864c05c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4615f86fb2494b1121fe39a3864c05c4_JaffaCakes118
Size

240KB
MD5

4615f86fb2494b1121fe39a3864c05c4
SHA1

d40da2d08064a848b3c54bc0ad8b2f79b75b28c0
SHA256

764485c4b2e37488f700938a71891f8df4820fe5d28a117664f3d6804db9e526
SHA512

b39abd3f41cd953e1793ef41e488b214da0b832f91f97daa140e79cb8d1b1917af1de7bedce3e3c50854a6ee7ae8b07c42e2d42c469f265cd757ef5e1c7321bc
SSDEEP

6144:F01g/sMta8CCiMldzV4cDC6naNF47g3zy:P3taAiMlpV4cDRnanj3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4615f86fb2494b1121fe39a3864c05c4_JaffaCakes118

Files

4615f86fb2494b1121fe39a3864c05c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ