4bcf87b9ff089798e828470bdacec4d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bcf87b9ff089798e828470bdacec4d5_JaffaCakes118
Size

488KB
MD5

4bcf87b9ff089798e828470bdacec4d5
SHA1

1f6325b8b536b8e06f25f9abc888931c88cca19c
SHA256

a642e04f1487175cc99d3b3f7c0c5fcd8438af1a01ef818c611dbda717dcb9a1
SHA512

4071ffd4402a7ce082ea61b310fc329835c8a51383e9b45633683b9d9def27ca9b661da7266fa1b0df59949b05100410798d0ee2d77243b2bfc726a4db2a6ff2
SSDEEP

12288:q3hlIBpqkaFK7TElKibsGNqdcgwsy8rRmni:q3hlvrsfGKiLNqIsy8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bcf87b9ff089798e828470bdacec4d5_JaffaCakes118

Files

4bcf87b9ff089798e828470bdacec4d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 456KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE